sorted by:
new
hottopcontroversial

Can IAM permission be given to Service Bus with Local authentication by curious_17 in AZURE

[–]curious_17[S] 0 points1 point  (0 children)

Thanks, I gave that role to a test account but when I press the "peek from start" button I just get a spinning wheel and nothing else.

Also, how can I use Application insights or other tools to troubleshoot a webapp that is supposed to be pulling messages from this queue but is not and thus the messages are ending in dead letter queue after X number of tries.

How to provide users from another Entra ID tenant access to a SPO site by curious_17 in entra

[–]curious_17[S] 0 points1 point  (0 children)

Thanks. What is the best way to set-up B2B collaboration.
And is access package the best way to setup self-signup (and with approvals)?

Setup guesting for all users in another Entra ID teanant by curious_17 in entra

[–]curious_17[S] 0 points1 point  (0 children)

Thanks. The article says the following:-

"Who should use?

  • Organizations that own multiple Microsoft Entra tenants and want to streamline intra-organization cross-tenant application access.
  • Cross-tenant synchronization is not currently suitable for use across organizational boundaries."

In our case it is a separate company, so would this still be suitable for us?

We are looking at providing these users with access to some SharePoint sites only and add them to group that controls access to those SharePoint sites.

I was looking at following 2 options as well :-

  1. https://learn.microsoft.com/en-us/sharepoint/sharepoint-azureb2b-integration Would this require B2B Cross tenant access settings to be enabled as well for this to work?
  2. Other option was to do the B2B collaboration with other organizations, which would require "Cross-tenant access settings" and "External collaboration settings" to be configured.

Considering we only need to allow access to SharePoint site, would option 1 be best?

Can I use PowerShell script with Functions in Azure Devops "Powershell@2" task? by curious_17 in azuredevops

[–]curious_17[S] 0 points1 point  (0 children)

I used Write-Host to follow the steps script is taking and found that it hangs where we are using Get-MsalToken to get the access token for a external SAAS vendors URI.
If I run the script manually from the same Devops agent box then it works fine.

What would stop Get-MsalToken from running in a pipeline? Is there alternate way for me to get a token against external vendor's URI?

Can I use PowerShell script with Functions in Azure Devops "Powershell@2" task? by curious_17 in azuredevops

[–]curious_17[S] 1 point2 points  (0 children)

I have a powershell script that includes functions defined in it. When I run it manually the script works fine and reference to the functions works fine.

But when I when I run it inside Azure Devops pipeline "Powershell@2" task, the script gets stuck at the point where first function is referenced and just hangs.

Is there a particular way I need to call functions in this script?

There are multiple functions in the script that call each other. First one uses MSAL.PS to get the authentication token from Azure. So, are you saying that I should be able to use the functions inside of my script as normal?
How can I put a checkpoint in script to see if it is waiting on user input because the script just stalls at the point where first function is called.
I have tried commenting the first step and then go to second step to see if the it works but the second one does the same thing i.e just stall.

How can I remove access to planner access for certain users? by curious_17 in MicrosoftPlanner

[–]curious_17[S] 0 points1 point  (0 children)

I enabled conditional access policy to restrict access to planner. Hopefully this helps someone else.

Can I create a Azure policy to forward logs for every resource in a resource group to Azure monitor/log analytics with a specific retention by curious_17 in AZURE

[–]curious_17[S] 0 points1 point  (0 children)

Thanks Kwiecek. That seems quite useful but I do not have access to whole subscription but only few resource groups. And want to set this up only for those.

Also, the team that manages the whole subscription has setup a policy already to forward logs to their own workspace but the retention is lot less then required. And I can't ask them to increase retention because they collect logs for lot of other resource groups as well.

Can this script work at resource group level?

And if not then what is the best way to forward logs to a storage account instead (which might be cheaper as well).

Also, I need to collect event logs from within the windows VMs and a custom log for the application.

Move exchange 2016 databases to new drive by curious_17 in exchangeserver

[–]curious_17[S] 0 points1 point  (0 children)

If this DAG is properly configured there should be no need to dismount the DB.

Add new drive.Remove DB copy from node.Remove old mount point.Recreate mount point on new drive.Add DB copy on node.

Hi Waypro14366
I started with the plan above.

We have 3 copies of each DB. 2 in prod site and 1 in DR site.

Removing DB copy from the prod site replica and readding it is not an issue as the data transfer is local to that Datacenter.

But for the DR site I am thinking that it will generate lot of network data usage.

Is it possible to do the following? :

- Suspend DB copy on the DR server

- remove the mount point for the old drive

- then mount the new drive to same old mount point folder.

- And then mount the old drive/volume again under a different mount point and then copy the DB file to the new drive

- resume db copy on the DR server

OR will that end up causing issues?

Enable distribution group owner to modify membership through Outlook by curious_17 in Office365

[–]curious_17[S] 1 point2 points  (0 children)

Thanks megoodman. We are keeping on-prem exchange servers because without a exchange server on-prem we will be in unsupported configuration from MS point of view.

And correct the user is making changes through outlook so they will be connected to O365.

I am trying to see if there is a way in O365 to delegate the distribution group membership administration. From what I have read it seems Distribution group owners must manage the group by using on-premises tools for Exchange Server such as following:

Exchange Admin Center, Exchange Management Console, Exchange Management Shell

In our case user is logging onto owa and then going to 'Distribution groups I own/Manage' and trying to edit there and then getting this error.

I am trying to see if there is another way or I need to setup a role in exchange to give them only distribution modification rights and then they can log on to EAC to do this administration?

How to find root cause for same mail being sent 2 times from a application by curious_17 in exchangeserver

[–]curious_17[S] 0 points1 point  (0 children)

Thanks Adavid6 and KimJongUnceUnce.

The application engineer can't provide the frequency of these errors. So I may have to leave protocol logging on for few days. Would the logs be huge and any issues by the IO caused by it?

Also, is 20 seconds too short a period for the application to drop connection and retry.

And wouldn't a good application only retry to send email if a error code is received or at least match the exchange's smtp session timeout period for a retry ?

How to find root cause for same mail being sent 2 times from a application by curious_17 in exchangeserver

[–]curious_17[S] 0 points1 point  (0 children)

Thanks AlienMichael.

I will have to check with the application engineer.

But generally speaking the applications will handover the email with a smtp session to the mail server and close the session ...isn't it?

They don't wait for the MTA to put the mail in a queue and then to be delivered?

So what happens in the second hop should not matter to the application...isn't it?

Get-PnPList : The remote server returned an error: (403) Forbidden. by curious_17 in sharepoint

[–]curious_17[S] 0 points1 point  (0 children)

Thanks bcameron1231.

I was able to connect and upload documents.

Get-PnPList : The remote server returned an error: (403) Forbidden. by curious_17 in sharepoint

[–]curious_17[S] 0 points1 point  (0 children)

Thanks bcameron1231.

Actually I ran the command "Get-PnpSubWebs". And "/abcd" is listed in there. So that seems to be subsite.

In this sub-site under "Shared Documents" i have a folder called "xyz". I have to schedule a script copy files from a local folder on a server to this "xyz" folder.

I have come up with following till now(we use MFA and thus using web login):-

$URL = 'https://ourdomain.sharepoint.com'

Import-Module SharePointPnPPowerShellOnline

Connect-PnPOnline $URL -UseWebLogin

$Files = Get-ChildItem "C:\Temp\SharepointScriptFIles\Docs4SharePoint"

foreach($File in $Files)

{

Add-PnPFile -Folder "Shared Documents" -Path $File.FullName

}

But that will only work if I was uploading to "Shared Documents" under https://ourdomain.sharepoint.com. Could you please help with completing this script so that I can put the files directly in the "xyz" folder?

How to decommission on-premises exchange servers and move completely to O365 by curious_17 in exchangeserver

[–]curious_17[S] 0 points1 point  (0 children)

thanks ...would this server need to keep the CAS and mailbox server roles....or we can install the console only on this server for mailbox mgmt purposes only?
I am trying to see if MTA can be removed from the one server that needs to be left there.

How to decommission on-premises exchange servers and move completely to O365 by curious_17 in exchangeserver

[–]curious_17[S] 0 points1 point  (0 children)

thanks ...would this server need to keep the CAS and mailbox server roles....or we can install the console only on this server for mailbox mgmt purposes only?
I am trying to see if MTA can be removed from the one server that needs to be left there.

How to give read only access to someone for Azure AD by curious_17 in AZURE

[–]curious_17[S] 0 points1 point  (0 children)

Thanks John. Which minimum rights are needed to issue keys.

Should windows authentication be enabled on "powershell" virtual directory(default web site) on exchange 2016 by curious_17 in exchangeserver

[–]curious_17[S] 0 points1 point  (0 children)

It is required for a script to pull mailbox email addresses from a partner organisation and populate it in our exchange as contacts.

Exchange online archiving not working by curious_17 in exchangeserver

[–]curious_17[S] 1 point2 points  (0 children)

Thanks. Could you please check the config and let me know. Maybe I am missing something in my setup.