JanVidarElven

# Require the Active Directory PowerShell Module, installed with AD RSAT tools
Import-Module ActiveDirectory

# Group count of all UPN suffixes in your Active Directory
Get-ADUser -Filter * | Select UserPrincipalName, @{Name="UPNSuffix"; Expression={($_.UserPrincipalName.Split("@",2)[1])}} | Group UPNSuffix

JanVidarElven

# Require the Azure Active Directory PowerShell Module
Import-Module MSOnline

# Credential and Connect
$msolcred = Get-Credential
Connect-MsolService -Credential $msolcred

# Group count of all UPN suffixes in your Azure AD
Get-MsolUser -All | Select UserPrincipalName, @{Name="UPNSuffix"; Expression={($_.UserPrincipalName.Split("@",2)[1])}} | Group UPNSuffix

JanVidarElven

# Azure AD v2 PowerShell Quickstart module install
# Azure AD has a GA version: AzureAD and Preview version: AzureADPreview

# Check available versions installed
Get-Module AzureAD -ListAvailable
Get-Module AzureADPreview -ListAvailable

# Install from PowerShell Gallery
Install-Module AzureAD
Install-Module AzureADPreview

JanVidarElven

# Azure AD v2 PowerShell Quickstart Connect

# Connect with Credential Object
$AzureAdCred = Get-Credential
Connect-AzureAD -Credential $AzureAdCred

# Connect with Modern Authentication
Connect-AzureAD

# Explore some objects

JanVidarElven

# Create a Dynamic Group for my test users of Seinfeld characters
New-AzureADMSGroup -DisplayName "Seinfeld Users" -Description "Dynamic groups with all Seinfeld users" -MailEnabled $false -SecurityEnabled $true -MailNickname "seinfeld" -GroupTypes "DynamicMembership" -MembershipRule "(user.department -eq ""Seinfeld"")" -MembershipRuleProcessingState "Paused"

# Get Group and members
$AADGroup = Get-AzureADMSGroup -SearchString "Seinfeld Users"
Get-AzureADGroupMember -ObjectId $AADGroup.Id

# Set Membership Processing
$AADGroup | Set-AzureADMSGroup -MembershipRuleProcessingState On

JanVidarElven

# This Application is for accessing the Azure AD Graph Api

# Log in to Azure AD with Global Admin
Connect-AzureAD

# Create the Azure AD API Application
$azureAdApp = New-AzureADApplication -DisplayName "Elven Azure AD Reporting Api App" -Homepage "https://localhost" -IdentifierUris "https://localhost/azureadreportingapi" -ReplyUrls "https://localhost"

$keyStartDate = "{0:s}" -f (get-date).AddHours(-1) + "Z"
$keyEndDate = "{0:s}" -f (get-date).AddYears(1) + "Z"

JanVidarElven

# Description: Sets Azure AD Connect Password Write Back AD Permissions
# Created by: Jan Vidar Elven, Enterprise Mobility MVP, Skill AS
# Last Modified: 01.06.2016
# Run this on-premises for your domain/forest

Import-Module ActiveDirectory

#region Initial Parameters/Variables

# Domain Controller in wanted domain, leave blank if using current domain

JanVidarElven

# PowerShell for calling the Azure AD Graph Reporting REST API, https://msdn.microsoft.com/en-us/library/azure/ad/graph/howto/azure-ad-reports-and-events-preview
# Getting Self Service Password Reset Registrations

# This script will require registration of a Web Application in Azure Active Directory 

# Method 1: Use steps here for manually creating required Web App: https://docs.microsoft.com/en-us/azure/active-directory/active-directory-reporting-api-prerequisites
# Method 2: Use Azure AD PowerShell as documented here: https://gist.github.com/skillriver/b46c51e2902a331a91221c6828bd320c#file-azureadapiapplication-ps1 

$loginURL = "https://login.microsoftonline.com"
$tenantdomain = "<yourtenant>.onmicrosoft.com"

JanVidarElven

# PowerShell CmdLets for Assigning EMS Licenses with Azure AD v2 PowerShell Module
# Read blog post for details: https://gotoguy.blog/2017/02/17/assign-ems-license-with-azure-ad-v2-powershell-and-dynamic-groups/

# Connect to Azure AD with Global Administrator
Connect-AzureAD

# List Subscriptions
Get-AzureADSubscribedSku | Select SkuId, SkuPartNumber

# EMS E3 license Service Plans

JanVidarElven

# Azure AD v2 PowerShell Module CmdLets for working with Extension Attribute Properties

# Connect to Azure AD with Global Administrator
Connect-AzureAD

# Get a User and Read Extension Properties
$aadUser = Get-AzureADUser -ObjectId <youruser>
$aadUser | Select -ExpandProperty ExtensionProperty

# Serialize User Object to JSON