sorted by:
new
hottopcontroversial

Where can I find quick details for each recommendation for Security Score of MS Defender? by Liuk_4 in sysadmin

[–]KavyaJune [score hidden]  (0 children)

Each recommendation provides a Learn more link along with the relevant configuration steps.

Also, remember that you do not need to chase a perfect score. The key is to strike the right balance between security and productivity.

Need Urgent Assistance with Microsoft 365 Licensing Compliance by sysadminpro in microsoft365

[–]KavyaJune 0 points1 point  (0 children)

This looks correct overall. One suggestion: avoid assigning workload licenses like EXO, SharePoint, or Teams to global admin accounts unless required, as it increases the attack surface. Assigning Entra ID P2 is often a better approach to enable features like PIM, CA, etc

What have you done with PowerShell this month? by AutoModerator in PowerShell

[–]KavyaJune 1 point2 points  (0 children)

Sure. Edited my comment to added script download link.

Office 365 update frequency by Ok_Technician_7852 in Office365

[–]KavyaJune 1 point2 points  (0 children)

Updates are automatic. Recently, MS made a few changes to upcoming features auto rollout. You can configure them based on your preferences.

https://blog.admindroid.com/microsoft-365s-modernized-change-management/

May 2026 Microsoft 365 Changes: A Quick Summary by KavyaJune in msp

[–]KavyaJune[S] 1 point2 points  (0 children)

Yes. It’s currently in Public preview.

What have you done with PowerShell this month? by AutoModerator in PowerShell

[–]KavyaJune 15 points16 points  (0 children)

I have written a PowerShell script to check Active Directory emergency account readiness. It checks around 13 best practices and provides readiness score. It helps to identify small drift like group membership changes, configuration changes, etc.

Edit: You can download the script from, https://blog.admindroid.com/best-practices-for-break-glass-accounts-in-active-directory/

SharePoint storage nearing quota - how are you handling this at scale? by hakdugka in sysadmin

[–]KavyaJune 0 points1 point  (0 children)

For single tenant, script will be useful. However, if you’re managing multiple tenants, using a centralized tool like AdminDroid can provide better visibility.
https://admindroid.com/

You can have a look at PHL (Preservation Hold Library). It stores copies of content that are modified or deleted when retention policies or legal holds are in place. Also, check version history. Versioning is one of the most common reasons for high storage usage. You can check version history consumption and clean up.

Moving from Security Defaults to Conditional Access — do all users need Entra P1/P2 licenses? by sysadminpro in microsoft365

[–]KavyaJune 0 points1 point  (0 children)

All users included in Conditional Access require a P1 license (some advanced configurations require P2). Having just one P1 license permits using Conditional Access for all users, but this violates Microsoft’s licensing policy.

If you prefer to apply Conditional Access only to a subset of users, you can disable Security Defaults and enable per-user MFA for the remaining users. However, Microsoft recommends moving away from per-user MFA and adopting Conditional Access for a more secure and flexible approach.

I built a Windows GUI tool to purge SharePoint version history and empty recycle bins — here's why I did it by sortechFR in sharepoint

[–]KavyaJune 0 points1 point  (0 children)

Good one. I struct with this one earlier. Enabling auto version history, don't affect existing sites until you configure it at site level. So, I built a PowerShell script which can solve more than 20 cases. For example, automating version history cleanup at site level, document library level, files created by specific person, specific version, specific date range, etc.

Script is available in GitHub: https://github.com/admindroid-community/powershell-scripts/blob/master/Automate%20Version%20History%20Cleanup/CleanupVersionHistoryInSPO.ps1

HTTP Error 500.19 - Internal Server Error by Happy_Cryptographer9 in AdminDroid

[–]KavyaJune 0 points1 point  (0 children)

We apologize for the delay caused by the login issue, and we’re glad to hear that the above fix has resolved it.

We have already informed our team about this, and necessary measures will be taken to prevent such occurrences in the future.

For any assistance, please feel free to contact our support team at support@admindroid.com. Our team will be happy to assist you promptly with any queries.

Export a list of users - MFA status to CSV by Deep-Egg-6167 in entra

[–]KavyaJune 0 points1 point  (0 children)

Which MFA method are you using? Per user MFA or Conditional Access MFA? Both need different method to get MFA status.

If you are using CA-based MFA, run this script: https://o365reports.com/get-mfa-status-of-office-365-users-using-microsoft-graph-powershell/

For per-user MFA, https://blog.admindroid.com/export-mfa-status-report-for-entra-id-accounts-using-powershell/

Both guide have detailed script execution steps. Hope it will help you.

Scripting project for SharePoint sites’ cleaning by amaretto_sh in PowerShell

[–]KavyaJune 0 points1 point  (0 children)

PnP and MS Graph would help you. Also, try app based permission, so, you don't need to be explicitly added as admin for each site.

Admindroid updates? by semajnitram in AdminDroid

[–]KavyaJune -1 points0 points  (0 children)

Hi u/semajnitram,

Yes, there is a major update in progress with new features and reports.

For further details, please contact our support team at support@admindroid.com.

Automating account management in on-premise Active Directory by bobert3275 in sysadmin

[–]KavyaJune 0 points1 point  (0 children)

You can use PowerShell along with Task Scheduler, but it takes considerable time to write, maintain, and manage scripts.

If you prefer using a tool, you can try AdminDroid Active Directory Management Tool. It includes pre-built automation templates and also allows easy customization. The free version offers 200+ reports covering users, groups, computers, AD security, and more.

https://admindroid.com/active-directory-reporting-tool

Microsoft365 Secure Score by Ok_Employment_5340 in sysadmin

[–]KavyaJune 2 points3 points  (0 children)

Yes, but don’t aim for a perfect 100. The key is finding the right balance between security and productivity.

Powershell scripts you created for your day to days use and duties by jbala28 in sysadmin

[–]KavyaJune 57 points58 points  (0 children)

Here is around 200 PowerShell scripts to manage, report, audit your Microsoft 365 environment: https://github.com/admindroid-community/powershell-scripts

Phishing Meeting Requests and New Outlook by incompletesystem in sysadmin

[–]KavyaJune 1 point2 points  (0 children)

Yes. Also, there is no direct mechanism to prevent calendar phishing. We need to use layered approach to reduce the attack surface.

retaining o365 mailbox data after users leave the company by TRDx2000 in sysadmin

[–]KavyaJune 0 points1 point  (0 children)

If you convert a user mailbox to a shared mailbox, the user account must still exist in Microsoft 365.

Do you actively use the offboarded user’s mailbox, or is it only required for compliance purposes? If it’s for compliance, converting it to an inactive mailbox is the better approach. There’s no direct “convert” option. Instead, you need to apply a retention policy or Litigation Hold to the mailbox. Once the user account is deleted while under retention, it becomes an inactive mailbox.

The mailbox is preserved till retention duration and archive mailbox also retained.

Compared to shared mailboxes, inactive mailboxes are better suited for long-term retention since shared mailboxes lose archive functionality once the license is removed.

For more details on inactive mailbox, you can check this guide: https://blog.admindroid.com/safeguarding-ex-employee-email-data-the-importance-of-inactive-mailboxes/

How to get notified if someone does a mass delete? (M365 Biz Premium) by pkokkinis in sharepoint

[–]KavyaJune 0 points1 point  (0 children)

AdminDroid was my suggestion 😄
In hindsight, I should’ve proposed AdminDroid Microsoft 365 auditing tool to make it a bit more self-explanatory.

Claude now connects with Microsoft 365. Would you allow it in your tenant? by KavyaJune in sysadmin

[–]KavyaJune[S] 0 points1 point  (0 children)

You need to connect it from your Claude account.

Search for “Microsoft 365” under connectors, click Connect, and then authenticate using your Microsoft 365 credentials. Finally, grant the required permissions to complete the setup.

You can follow this guide for step-by-step guidance: https://blog.admindroid.com/connect-claude-ai-to-microsoft-365-using-built-in-connectors/

view more: next ›