arjancornelissen

# Connect via deviceauthentication and get the TenantID and User ObjectID
Connect-MgGraph -UseDeviceAuthentication
$context = Get-MgContext
$currentUser = (Get-MgUser -UserId $context.Account).Id

# Get all available roles
$myRoles = Get-MgRoleManagementDirectoryRoleEligibilitySchedule -ExpandProperty RoleDefinition -All -Filter "principalId eq '$currentuser'"

# Get SharePoint admin role info
$myRole = $myroles | Where-Object {$_.RoleDefinition.DisplayName -eq "SharePoint Service Administrator"}

arjancornelissen

$msolusers = Get-MsolUser -All | Select-object ObjectId, WhenCreated, LastPasswordChangeTimestamp, @{n="mfaenabled";e={$_.StrongAuthenticationMethods.Count -gt 0}}
$users = Get-AzureADUser -All $true | Select-Object ObjectId, UserPrincipalName, DisplayName, @{n="onpremDN";e={$_.ExtensionProperty.onPremisesDistinguishedName}}, CompanyName, AccountEnabled, UserType
foreach($user in $users)
{
  $msoluser = $msolusers | where-object {$_.ObjectID -eq $user.ObjectID}
  # do something with this data
}

arjancornelissen

$msolusers = Get-MsolUser -All | Select-object ObjectId, WhenCreated, LastPasswordChangeTimestamp, @{n="mfaenabled";e={$_.StrongAuthenticationMethods.Count -gt 0}}
$users = Get-AzureADUser -All $true | Select-Object ObjectId, UserPrincipalName, DisplayName, @{n="onpremDN";e={$_.ExtensionProperty.onPremisesDistinguishedName}}, CompanyName, AccountEnabled, UserType

# Create empty array and do a foreach on every item, this takes a few seconds on 30.000 items
$msoluserArray = @{}
$i=0
$msolusers.foreach({
    $msoluserArray["$($psitem.ObjectId)"] = $i
    $i++
})

arjancornelissen

$mailboxes = Get-Mailbox -ResultSize Unlimited
$total = $mailboxes.Count
$count = 0
foreach($mailbox in $mailboxes){
	Write-Progress -Activity "Updating auditing: $($mailbox.UserPrincipalName) ($count or $total)" -PercentComplete ($count/$total*100)
	$count++
	Set-Mailbox -Identity $mailbox.ExternalDirectoryObjectId -DefaultAuditSet Owner, Admin, Delegate
}

arjancornelissen

# For a single Policy
Set-CsTeamsMessagingPolicy -Identity Tag:Default -AllowUserTranslation $true

# For all Policies
Get-CsTeamsMessagingPolicy | Set-CsTeamsMessagingPolicy -AllowUserTranslation $true

arjancornelissen

Import-Module SkypeOnlineConnector
$sfbSession = New-CsOnlineSession -UserName <username>
Import-PSSession $sfbSession

arjancornelissen

$roleid = Get-PrivilegedRoleAssignment | Where-Object {$_.RoleName -eq "SharePoint Service Administrator"}
Enable-PrivilegedRoleAssignment -TicketNumber "I376524" -Reason "Handling SharePoint issue" -Duration 2 -RoleId $roleid

arjancornelissen

$sites = Get-SPOSite -Limit All
 
foreach ($site in $sites)
{
    Write-Output $site.Url
    Set-SPOUser -Site $site.Url -LoginName "c:0t.c|tenant|<SharePoint Service Administrator Login Name>" -IsSiteCollectionAdmin $true 
}

arjancornelissen

param
(
    # give the URL of the site or when to reset for every site the admin url
    [Parameter(Mandatory=$true)]
    [string]$url,

    # Do we need to use the weblogin
    [Parameter(Mandatory=$false)]
    [switch]
	$useweblogin

arjancornelissen

$user = Get-ADUser -Identity <username>
$ImmutableId = [System.convert]::ToBase64String($user.ObjectGUID.ToByteArray())