Last week at NICConf I presented two sessions on Management of Microsoft Azure AD, Application Publishing with Azure AD - the New Management Experience! and Take your Azure AD Management Skills to the Next Level with Azure AD Graph API and Powershell! In the last session i presented demos and scripts with some technical details, so in this blog post I will link to those PowerShell scripts together with some explanations.

When you configure the Azure AD Premium Self Service Password Reset solution on your Azure AD tenant and then the Azure AD Connect Password Writeback feature, you will need to add permissions in your local Active Directory that permits the Azure AD Connect account to actually change and reset passwords for your users , as detailed here: https://docs.microsoft.com/en-us/azure/active-directory/active-directory-passwords-getting-started#step-4-set-up-the-appropriate-active-directory-permissions . I wrote this PowerShell script that helps you configure this correctly in your domain/forest.

My Skill colleague Pål-Andre Kjøniksen wrote a blog post on how he can control the heating in his Tesla Model S based on his Office 365 Calendar appointments and Microsoft Flow. https://www.skill.no/blogg/samhandlingsbloggen/2017-01-25-microsoft-flow-styrer-varmen-i-teslaen/ . The blog post is in Norwegian, but it should be fairly simple to follow the steps, where the idea was that if he creates a Calendar appointment that starts with “Tesla:”, the heating will start up 20 minutes before that, making sure that the car is warm when he drives off.

A while back I wrote a blog post on how you could use Azure AD Privileged Identity Management to indirectly require MFA for Office 365 Administrator Roles activation before they connected to Exchange online via Remote PowerShell. See http://gotoguy.blog/2016/09/09/how-to-enable-azure-mfa-for-online-powershell-modules-that-dont-support-mfa/ . In december a new Exchange Online Remote PowerShell Module was released (in preview), https://technet.microsoft.com/en-us/library/mt775114(v=exchg.160) , that uses Modern Authentication and that supports Azure Multi-Factor Authentication. Lets try it out: First you need to verify that Modern Authentication is enabled in your Exchange Online organization, as this is not enabled by default: https://support.

In Norway we have a National Identification Number which is an 11-digit personal identifier, which also is referred to a Birth Number as this is given to every Norwegian borned at birth. The number consists of: 6 first digits are birth date in the form of: ddmmyy 3 next digits are personal, with the last of those 3 indicating whether you are male (odd number) or female (even number) The last 2 digits are control digits, based on modulus functions on the first digits (Source: http://www.

I have been thinking about this a while, as my previous blog URL address systemcenterpoint.wordpress.com and title SystemCenterPoint not longer accurately reflected the blog content I produce. When I created the blog for over 4 years ago, I was heavily invested in System Center products, and especially Service Manager and Operations Manager, and most of my content published on the blog was related to that. These days, I still work a lot with SCSM and SCOM, and with partners such as Cireson, SquaredUp and itnetX, but also more and more with Cloud and Azure based solutions such as Operations Management Suite.