Windows Hello for Business Entra ID Sync Issue
SOLVED: See my answer below. Hi all, Interesting issue we're running into while trying to deploy Windows Hello for Business. I've noticed in our Azure AD Synchronization Service Manager, during export from Entra to on-prem DC, the…
How to extract an Active User Listing with identifier columns for "Groups/UserGroups" & "License Type"?
Hi Team, I've been going back and forth between the Admin and Entra Portals. I am trying to extract a comprehensive Active User listing for my organization with an indicator of the following: Full Name User Email Group/UserGroup Department License…
Limited or No Access to a B2C Tenancy to New Developers
I've added myself and another dev to the tenancy, resource group and subscription as contributors to an already up and running B2C Tenancy and yet we still get the error message reading "Limited or No Access" which claims that I don't have an…
Unable to access azure portal
Received usual error code when attempting to log-in to start training Error message Interaction required The portal encountered an issue while attempting to retrieve access tokens. We suggest attempting to sign in again, or alternatively, continuing…
GET /users throws InternalServerError with 200 status code and POST /users UnknownError with 405 status code
GET v1.0/users?$select=id,delet... throws…
Connect-OrganizationAddInService using Entra ServicePrincipal ID
I am trying to find if someone has successfully done this, basically automatize the deployment of an Add-in to Office 365 Client Secret: "1111111111111111111" (This is a secret that should be protected and not shown, I am having a look how to…
Graph API for managed devices list is not working
I have an application which queries deviceManagement/managedDevices API to fetch all the devices. I have given all the right permission as mentioned in the documentation. I am able to fetch access Token but when I used this access token to do a GET, I…
Everyone locked out of tenant due to a faulty Conditional Access Policy
We have been locked out of our tenant for almost 2 weeks now due to a faulty Conditional Access policy. During this week, there have been several conversations with a number of Microsoft support technicians, none of which seemed to have an understanding…
On-Prem AD Migration to Microsoft 365
Hello, We are currently in the process of moving from a On-Prem .local AD to a solely Micrsoft Entra .org (AAD) Environment. The main purpose of this move is to Migrate the local File Share data to SharePoint, since there is already a need to run AD…
Moving users across on-prem
Please help!!!! We have 3 on-prem domains abc.com.au 123.com and cab.com. They all sync back to single azure ad tenancy and gets assigned same domain for their email address (cab.com). I am trying to move selected users from the first 2 domain to the…
Everyone locked out of tenant due to a faulty Conditional Access Policy
We have been locked out of our tenant for over a week now due to a faulty Conditional Access policy. During this week, there have been several conversations with a number of Microsoft support technicians, none of which seemed to have an understanding of…
I can't create a Microsoft Entra ID tenant
I can't create a Microsoft Entra ID tenant following the instructions here: https://learn.microsoft.com/en-us/training/modules/allow-users-reset-their-password/3-implement-azure-ad-self-service-password-reset I don't see the same pages or options for…
How do I activate a free Entra ID P2 on my trial subscription
I am trying to go through the instructions here: https://learn.microsoft.com/en-us/training/modules/allow-users-reset-their-password/4-exercise-set-up-self-service-password-reset Go to Microsoft Entra ID > Password reset. Select Get a free Premium…
Missing XboxLive.signin and XboxLive.offline_access scopes
Hello, I am trying to setup a registered app in Azure Active Directory for a web application to authenticate with using OIDC. However, the two scopes I am looking for, XboxLive.signin and XboxLive.offline_access, seem to be missing? Whenever I do request…
Unable to install service account (gMSA) after Provisioning Agent installation.
Hello, After installing AADConnectProvisioningAgentSetup.exe I am unable to finish the configuration. gMSA is created in our AD but it still says it fails; Error while creating group managed service account (gMSA). Error: Unable to install service…
Prevent constant MFA requests for hybrid workforce
Hello, Most of our users are hybrid, working remotely via VPN and locally in office. Regardless of our 30-day MFA policy, our users are prompted for MFA every few days if they move locations between working at home and at the office. We are a non-profit…
Enterprise applications: Microsoft Graph Command Line tools, How to restrict connection to Microsoft Graph and grant access to specific users
Hello team, I am trying to grant access to specific users to Microsoft Graph. the objective is to block public access in our tenant to Microsoft Graph. I tried using conditional access, however, in the apps to select, it doesn't show Microsoft…
Microsoft Teams integration automation
I want to add Microsoft Teams integration to my web app to create meeting links. I was able to do this by manually registering the application in the Microsoft Entra admin center and setting up keys and permissions. I'm looking for a way to simplify this…
Authenticator App - can't remove greyed out account
Hello all, I'm stuck in a strange loop using the MS Authenticator App. I'm one of the admins at my school and I've registered my phone via https://account.activedirectory.windowsazure.com/securityInfo using the MS Authenticator App. I wanted to…
How to authenticate two azure app services that has vue.js and nest.js deployed on them individually
We have two app services that hosts a vue.js front-end and a nest.js backend. The issue is that we want the nest.js backend to be secure with entraID and we did implement that, however, when the API is called, it asks the user to be logged in through…