Refresh gMSA permissions for Entra Cloud Sync Members

Problem If you add or remove Active Directory permissions on the gMSA account used by Microsoft Entra Cloud Sync provAgentgMSA ,the agent may not pick up the changes immediately. This can affect any scenario where the provisioning agent uses this gMSA account to access Active Directory, such as: * Microsoft Entra

Bastien Perez
Bastien Perez
Microsoft 365

Microsoft Entra: scheduled end of life for SMS and voice call MFA - the full preparation guide Members

💡Need help preparing this migration? Get in touch through the contact form at https://itpro-tips.com/contact/ or on LinkedIn at https://www.linkedin.com/in/perez-bastien/ Microsoft has announced through Message Center notification MC1426371 that SMS and phone calls will no longer be supported as built-in

Bastien Perez
Bastien Perez
Microsoft 365

Microsoft Entra : fin de vie programmée du MFA par SMS et appel vocal - guide de préparation Members

💡Besoin d'aide pour préparer cette migration ? Contactez-moi via le formulaire de contact https://itpro-tips.com/contact/ ou sur LinkedIn https://www.linkedin.com/in/perez-bastien/ Microsoft a annoncé via le Message Center MC1426371 que les SMS et les appels téléphoniques ne seront plus pris en

Bastien Perez
Bastien Perez
Microsoft 365

Get-ADSyncAADCompanyFeature requires AADUserName after an Entra Connect upgrade Members

After migrating Microsoft Entra Connect to a newer version, some PowerShell cmdlets may change behavior before the official documentation fully catches up. This is the case with Get-ADSyncAADCompanyFeature in Microsoft Entra Connect Sync 2.6.84.0. Symptom On an older Entra Connect Sync server running version 2.6.

Bastien Perez
Bastien Perez
Microsoft 365

Connect to Azure VMs using Azure Bastion: RBAC, group nesting and a PowerShell helper Members

Azure Bastion is a managed jump-host service that lets you connect to Azure virtual machines over RDP or SSH without assigning them a public IP address, configuring a VPN, or installing an agent on the VM. Connections are established securely over TLS through the Azure portal or a native

Bastien Perez
Bastien Perez
Azure

Microsoft Defender for Office 365 Plan 1 comes to Microsoft 365 E3 and Office 365 : What Changes Members

Microsoft is adding Defender for Office 365 Plan 1 to Microsoft 365 E3 and Office 365 E3 subscriptions. The rollout started on June 17, 2026, and should be completed by autumn 2026. This is a significant security improvement for E3 tenants. However, two details require attention: * Protection is enabled automatically

Bastien Perez
Bastien Perez
Microsoft 365

OWA error "OwaUserHasNoMailboxAndNoLicenseAssignedException" when opening a mailbox Members

When an unlicensed account with no mailbox tries to access another user’s mailbox or a shared mailbox, OWA returns a 500 error: OwaUserHasNoMailboxAndNoLicenseAssignedException or UserHasNoMailboxAndNoLicenseAssignedError. Let's look at why it happens and how to get straight into the mailbox. The error If you inspect the OWA startup

Bastien Perez
Bastien Perez
Microsoft 365

OneDrive moves to the cloud.microsoft domain: what actually changes (and what does not) Members

Microsoft is moving the OneDrive web experience from the familiar contoso-my.sharepoint.com address to a new unified domain: onedrive.cloud.microsoft. It is announced in the Microsoft 365 message center under MC1392563 (link), and it is part of the broader cloud.microsoft domain unification that Microsoft started back

Bastien Perez
Bastien Perez
Microsoft 365

Intune enrollment CNAME records: do you really need them? Members

A recurring question when you set up Windows device management with Microsoft Intune: "Do I really have to create the EnterpriseEnrollment / EnterpriseRegistration CNAME records?" The short answer is no. They are optional, and if you rely on automatic enrollment they bring you nothing. Let's clear this

Bastien Perez
Bastien Perez
Intune

Soft delete for Entra devices (preview) Members

Good news for Microsoft 365 admins: deleting a device in Microsoft Entra ID is no longer necessarily permanent. Microsoft has introduced soft delete for device objects in Entra ID (currently in preview), and it works much like the soft delete you already know for users and groups. Instead of being

Bastien Perez
Bastien Perez
Identity

Claude Cleaner: bulk delete Claude.ai conversations Members

Claude.ai stores every conversation you have with the model in the sidebar. Deleting them one by one is fine for a handful, painful for a few hundred. The official UI offers no multi-select, no range delete, no "clear all". Claude Cleaner is a Chrome extension that

Bastien Perez
Bastien Perez
AI

ChatGPT Cleaner: bulk delete and archive conversations Members

ChatGPT lets you delete or archive conversations, but only one at a time. There is no "select all", no shift-click range, no bulk action in the sidebar. Cleaning out a couple of years of throwaway chats turns into a click-confirm-wait loop. ChatGPT Cleaner is a

Bastien Perez
Bastien Perez
AI