Information about SharePoint, Microsoft 365, Azure, Mobility and Productivity from the Computer Information Agency
Slides from this month’s webinar are at:
https://www.slideshare.net/directorcia/august-2022-ciaops-need-to-know-webinar
If you are not a CIAOPS patron you want to view or download a full copy of the video from the session you can do so here:
http://www.ciaopsacademy.com.au/p/need-to-know-webinars
Watch out for next month’s webinar.
To enable the Microsoft Adoption Score navigate as an admin to:
and expand the Reports heading on the left. Under here you should now find an option called Adoption Score as shown above.
When you select this, you’ll see the above on the right if you have not enabled Adoption Score.
If not enabled, select the Enable Adoption Score button.
You should then see the message shown above letting you know that it takes about 24 hours for the data to start flowing into the dashboard.
After that period you should see data for your tenant like shown above.
As Adoption Score is not on by default I recommend that it is turned on for all tenants to help you get a better idea of how your organisation is taking advantage of the Microsoft Services. For more information see the Microsoft documentation:
but in short, turn it on and use it in conjunction with Secure Score.
If you run the command:
get-intuneconfigurationpolicy
you’d except to see all your Intune configuration policies displayed.
However, after connecting to the Microsoft Graph module you see that nothing is returned. My experience has also been receiving incomplete results using these commands.
What I have found is that using the Microsoft Graph directly by using commands like:
$uri = “https://graph.microsoft.com/beta/deviceManagement/deviceConfigurations/”
(Invoke-MSGraphRequest -Url $URI -HttpMethod GET).value
produces the desired results as shown above in the same environment.
So my tip is when working with Intune and Endpoint Manager with PowerShell is, use the Microsoft Grah directly to obtain and set the information you need.
As the MS documentation says:
Microsoft Defender External Attack Surface Management (Defender EASM) continuously discovers and maps your digital attack surface to provide an external view of your online infrastructure.
Basically you plug in your resources like:
Defender EASM will then use these as a ‘seed’ to search through public information and report back.
You’ll then discover not only if you have any vulnerabilities in things like routers, web sites, etc but you’ll also probably find a whole swag of information that you didn’t know was out there.
In short, Defender EASM, acts as kind of a scheduled ‘penetration test’ for your environment, which I think is super handy
As you can see above, it ain’t very expensive either! To me that makes it a no-brainer. In my environment I have 40 odd discovered assets making the cost 64 cents a day and just over $19 per month! Peanuts for what it provides. Best of all, you also get a a free 30 day trial to see what it is all about.
Like Microsoft Sentinel back in the day, it is still early days for this service and I expect it to improve rapidly so now is the time to jump on board and start using it to get a feel for what it is all about. I certain have, and I encourage you to do the same.
Microsoft has documentation here:
if you want to read more.
Join me for the free monthly CIAOPS Need to Know webinar. Along with all the Microsoft Cloud news we’ll be taking a look at Teams Shared Channels in Microsoft 365.
Shortly after registering you should receive an automated email from Microsoft Teams confirming your registration, including all the event details as well as a calendar invite.
You can register for the regular monthly webinar here:
(If you are having issues with the above link copy and paste – https://bit.ly/n2k2208 – into your browser or scan this QR code)
The details are:
CIAOPS Need to Know Webinar – August 2022
Friday 26th of August 2022
11.00am – 12.00am Sydney Time
All sessions are recorded and posted to the CIAOPS Academy.
The CIAOPS Need to Know Webinars are free to attend but if you want to receive the recording of the session you need to sign up as a CIAOPS patron which you can do here:
or purchase them individually at:
Also feel free at any stage to email me directly via director@ciaops.com with your webinar topic suggestions.
I’d also appreciate you sharing information about this webinar with anyone you feel may benefit from the session and I look forward to seeing you there.
Slides from this month’s webinar are at:
https://www.slideshare.net/directorcia/july-2022-ciaops-need-to-know-webinar
If you are not a CIAOPS patron you want to view or download a full copy of the video from the session you can do so here:
http://www.ciaopsacademy.com.au/p/need-to-know-webinars
Watch out for next month’s webinar.
Microsoft now has the capability to create a Shared Channel. I have created a Shared Channel in my own tenant that I am freely making available to anyone who wants an invite to see what Shared Channels are all about.
If you are keen on participating then you’ll need to take some actions in your own tenant first to allow the connection.
As an administrator open the Azure portal.
In the top search box inside the Azure portal search for Azure Active Directory. Then select the service matching that when it appears as shown above.
From the menu that appears on the left select External Identities.
On the screen that appears, select Cross-tenant settings from the menu on the left. Then select Organizational settings on the right as shown above.
Now select Add organization either from the menu at the top or the button at the bottom as shown.
From the dialog that appears from the right enter either the domain ciaops365.com or the tenant id 5243d63d-7632-4d07-a77e-de0fea1b77a4. You see the name as CIAOPS after this is completed successfully. When it does appear as shown above, select the Add button.
A CIAOPS entry should now appear as shown above.
Select the hyperlinked text under the Outbound access heading which will say Inherit from default.
Select B2B direct connect from the menu across the top. Then select Customize settings. Finally, select Allow access as shown above.
Select the External applications tab. Then Allow access. Finally, select Save at the bottom of teh screen.’
If you take a moment to read the top of the screen before you press Save you’ll see:
Outbound access settings determine how your users and groups can interact with apps and resources in external organizations. The default settings apply to all your cross-tenant scenarios unless you configure organizational settings to override them for a specific organization. Default settings can be modified but not deleted.Learn more
B2B direct connect lets your users and groups access apps and resources that are hosted by an external organization. To establish a connection, an admin from the external organization must also enable B2B direct connect. When you enable outbound access to an external organization, limited data about your users is shared with the external organization, so that they can perform actions such as searching for your users. More data about your users may be shared with an organization if they consent to that organization’s privacy policies.Learn more
In short, you have allowed your tenant to access my shared Teams channel from just my tenant (ciaops365.com).
When you do press Save you see the above message. Press Yes to continue and accept.
That is all the configuration you need to do inside your tenant. What you then need to do is send me an email (director@ciaops.com) letting me know you’d like to be added to my shared channel. When I receive this I will add you.
After I’ve added you the shared channel should appear in your Teams environment as shown above without the need to switch tenants.
Once you are in my shared channel encourage you to participate and get involved with the content that is there. More details are inside my shared channel. To get things started post a message about why you are in the shared channel and say hello to everyone else.
Feel free to let others know about this offer as I’d like to make my shared channel a free resource for people to come and share information about the Microsoft Cloud.
I’m in the process of building a Flow that connects to a Dataverse database inside a Microsoft Team. When you create this you get the ability to create Cloud Flows (aka Power Automate).
However, there is an issue when you try and use something like Azure Key Vault actions here.
In the above, you can see that I’m in my default Power Automate environment and the Get secret action of Azure Key Vault is accessible as expected and shows all the items I have inside the vault.
However, if I swap to another environment that was created as part of a Team (here an environment called Automation), you’ll see that I can add the Azure Key Vault action Get Secret but I no longer see the items inside that vault as I did before! I am using the same user in both cases.
It has clearly something to do with the connection,
which shows up as invalid as you can see above.
If I try and add a new connection, I see the above dialog but can’t make any changes or enter any information. Looks like I might need to investigate the Connect with a service principal option perhaps?
However, for now, there seems to be a limit when you use the Azure Key vault actions inside anything that is not the default environment for the Power Platform in your tenant. I will assume this is because these environments are limited to Microsoft Teams and have innate restrictions that I’ll need to find information on. If you know what this is, I’d love to hear from you.
CIAOPS 