# ITPro-Tips

> Field notes on Microsoft identity and workplace technologies, written by Bastien Perez, Microsoft MVP (Identity and Access, Microsoft 365) and independent consultant at Clidsys. The site publishes concrete fixes, deployment notes and PowerShell snippets drawn from real customer projects, not vendor summaries.

Reading this site:

- Articles are written in English and French. Most posts exist in both languages under different URLs; the English version is listed here.
- Posts are dated and describe product behaviour at the time of writing. Microsoft 365 and Entra ID change quickly, so check the publication date against current documentation before acting on a post.
- Code samples are mostly PowerShell, with some KQL for Log Analytics and raw Microsoft Graph requests.
- The author also maintains open source tools referenced across the articles: PS365 (PowerShell module for Microsoft 365), SAML Cert Eye (X.509 SAML certificate analyser) and NtraBoost (browser extension for the Entra portal).

## Site pages

- [Home](https://itpro-tips.com/): latest articles
- [About](https://itpro-tips.com/about/): who writes this site
- [Tools I Use](https://itpro-tips.com/tools/): tools the author relies on day to day
- [Books and resources](https://itpro-tips.com/resources/): recommended reading
- [Tags](https://itpro-tips.com/tags/): full topic index
- [Contact](https://itpro-tips.com/contact/): how to reach the author
- [Sitemap](https://itpro-tips.com/sitemap.xml): every published URL, both languages

## Microsoft Entra ID, Microsoft 365 and Exchange Online

- [Refresh gMSA permissions for Entra Cloud Sync](https://itpro-tips.com/refresh-gmsa-permissions-for-entra-cloud-sync/): Problem If you add or remove Active Directory permissions on the gMSA account used by Microsoft Entra Cloud Sync provAgentgMSA
- [Microsoft Entra: scheduled end of life for SMS and voice call MFA - the full preparation guide](https://itpro-tips.com/microsoft-entra-scheduled-end-of-life-for-sms-and-voice-call-mfa/): 💡Need help preparing this migration?
- [Get-ADSyncAADCompanyFeature requires AADUserName after an Entra Connect upgrade](https://itpro-tips.com/get-adsyncaadcompanyfeature-requires-aadusername-after-an-entra-connect-upgrade/): After migrating Microsoft Entra Connect to a newer version, some PowerShell cmdlets may change behavior before the official
- [Microsoft Defender for Office 365 Plan 1 comes to Microsoft 365 E3 and Office 365 : What Changes](https://itpro-tips.com/microsoft-defender-for-office-365-plan-1-comes-to-microsoft-365-e3-and-office-365-what-changes/): Microsoft is adding Defender for Office 365 Plan 1 to Microsoft 365 E3 and Office 365 E3 subscriptions
- [OWA error "OwaUserHasNoMailboxAndNoLicenseAssignedException" when opening a mailbox](https://itpro-tips.com/owa-error-owauserhasnomailboxandnolicenseassignedexception-when-opening-a-mailbox/): When an unlicensed account with no mailbox tries to access another user’s mailbox or a shared mailbox, OWA returns a 500 error
- [OneDrive moves to the cloud.microsoft domain: what actually changes (and what does not)](https://itpro-tips.com/onedrive-moves-to-the-cloud-microsoft-domain-what-actually-changes-and-what-does-not/): Microsoft is moving the OneDrive web experience from the familiar contoso-my.sharepoint.com address to a new unified domain
- [Soft delete for Entra devices (preview)](https://itpro-tips.com/soft-delete-for-entra-devices-preview/): Good news for Microsoft 365 admins
- [SCIM Radar: a dashboard for your Entra ID provisioning logs](https://itpro-tips.com/scim-radar-a-dashboard-for-your-entra-id-provisioning-logs/): Entra ID's provisioning logs are the source of truth when a SCIM job decides to skip a user, errors out on a specific
- [Exchange RBAC Manager: a GUI to explore and manage Exchange Online RBAC](https://itpro-tips.com/exchange-rbac-manager-a-gui-to-explore-and-manage-exchange-online-rbac/): Exchange Online RBAC is powerful, but day to day it still boils down to chaining Get-RoleGroup, Get-ManagementRoleAssignment,
- [Microsoft Entra Backup and Recovery Preview: What you need to know](https://itpro-tips.com/microsoft-entra-backup-and-recovery-preview-what-you-need-to-know/): All All properties Partial Object type Scope Properties / notes
- [Salesforce SSO - New device activation requirements](https://itpro-tips.com/salesforce-sso-nouvelles-exigences-dactivation-des-appareils-avec-microsoft-entra-id-2/): Starting February 3, 2026, if your organization uses Salesforce with Microsoft Entra ID via SAML, you may notice unexpected
- [Connect-MgGraph - Disable WAM](https://itpro-tips.com/connect-mggraph-disable-wam/): ⚠️Update July 30, 2026
- [Delete the value of an Entra ID attribute synchronized with Entra Connect Sync](https://itpro-tips.com/delete-the-value-of-an-entra-id-attribute-synchronized-with-entra-connect-sync/): Introduction When you synchronize your Active Directory objects to Entra ID, sometimes an attribute is no longer useful or
- [Update the AD schema for Entra Cloud Sync](https://itpro-tips.com/update-the-ad-schema-for-entra-cloud-sync/): Problem If you have extended your Active Directory schema (i.e., added attributes to the schema), Microsoft Entra Cloud Sync
- [Simplify SAML certificate management with SAML Cert Eye](https://itpro-tips.com/simplify-saml-certificate-management-with-saml-cert-eye/): Managing certificates in SAML metadata is often a headache
- [Trust indicators in Microsoft Teams](https://itpro-tips.com/trust-indicators-in-microsoft-teams/): New icons in the Microsoft Teams interface This feature is currently in Public Preview so maybe you don't have this yet)
- [Prepare for the end of legacy MFA & SSPR policies by September 30 2025](https://itpro-tips.com/prepare-for-the-end-of-legacy-mfa-sspr-policies-by-september-30-2025/): Introduction On September 30, 2025, Microsoft will retire legacy MFA and SSPR policies
- [Activate Entra ID Roles via PIM with restricted access to the Microsoft Entra Portal](https://itpro-tips.com/activate-entra-id-roles-via-pim-with-restricted-access-to-the-microsoft-entra-portal/): Access denied to the Microsoft Entra portal If your tenant uses PIM for role assignment, you may encounter the following error
- [gMSA account creation error for Entra Cloud Sync](https://itpro-tips.com/gmsa-account-creation-error-for-entra-cloud-sync/): Error creating gMSA account in Entra Cloud Sync When installing Entra Cloud Sync with a gMSA, you may encounter the following
- [End of Basic Authentication for SMTP in Exchange Online: new dates, report, and PowerShell [February 2026 update]](https://itpro-tips.com/end-of-life-basic-authentication-smtp-exchange-online/): Timeline The end of basic authentication on SMTP (SMTP Basic Auth) in Exchange Online has been postponed again
- [I'm now Microsoft MVP Microsoft 365](https://itpro-tips.com/mvp-2025/): I'm proud to announce that I've once again been awarded the title of Microsoft MVP (Most Valuable Professional) in the
- [Microsoft Entra launches August with several updates and enhancements](https://itpro-tips.com/microsoft-entra-launches-august-with-several-updates-and-enhancements/): Features now in General Availability (GA - finalized, stable, and production-supported)
- [Purview PowerShell : fix the "matches multiple entries" error](https://itpro-tips.com/purview-powershell-fix-the-matches-multiple-entries-error/): When managing Microsoft 365 compliance (Purview) via Connect-IPPSession, some cmdlets like Get-RoleGroupMember may fail
- [Block Direct Send in Exchange Online](https://itpro-tips.com/block-direct-send-in-exchange-online/): Introduction On June 27, 2025, Varonis published an article stating that Direct Send is used by attackers
- [Blocking Self-Service Purchases and License Requests in Microsoft 365](https://itpro-tips.com/blocking-self-service-purchases-and-license-requests-in-microsoft-365/): Microsoft allows end users to purchase certain licenses themselves, like Power BI Pro or Copilot, without admin intervention
- [Entra ID Join blocking: impact on Intune and Windows Autopilot](https://itpro-tips.com/entra-id-join-blocking-impact-on-intune-and-windows-autopilot/): Many blogs, security audit tools, and consulting firms recommend disabling device join to Microsoft Entra ID
- [Where to Find OneDrive ADMX and ADML Files](https://itpro-tips.com/where-to-find-onedrive-admx-and-adml-files/): ADMX files (Administrative Templates) are XML files used to define Group Policy settings in Windows environments, and can also
- [Clear Microsoft Teams v2 cache](https://itpro-tips.com/clear-microsoft-teams-v2-cache/): Why clear the Teams cache?
- [End of Life for YubiKey Manager GUI: What are the alternatives?](https://itpro-tips.com/end-of-life-for-yubikey-manager-gui-what-are-the-alternatives/): Yubico announces end of life Yubico officially announced the end of life for YubiKey Manager GUI on February 19, 2025, as part
- [Missing Microsoft Intune Enrollment App in Microsoft Entra ID](https://itpro-tips.com/missing-microsoft-intune-enrollment-app-in-microsoft-entra-id/): Can’t find the Microsoft Intune Enrollment application in your Microsoft 365 tenant and need it for a Conditional Access policy?
- [Get the Microsoft 365 Summer-Fall 2024 workbook](https://itpro-tips.com/microsoft-365-summer-fall-2024-workbook/): The 2024 edition of my Microsoft 365 Summer-Fall Workbook is now available in a streamlined format designed to make learning
- [Set-MgGroupLicense - error assignLicense are missing parameters addLicenses](https://itpro-tips.com/set-mggrouplicense-error-assignlicense-are-missing-parameters-addlicenses/): Problème assignLicense are missing parameters addLicenses The Set-MgGroupLicense command can cause issues when attempting to
- [Enabling Default File Opening in Desktop Apps on Microsoft Teams v2](https://itpro-tips.com/enabling-default-file-opening-in-desktop-apps-on-microsoft-teams-v2/): The problem Since the release of Microsoft Teams v2 in 2024, the option to configure default file opening behavior within
- [Why you should stop using Seamless SSO if you use Hybrid or Entra ID Join (updated August 2025)](https://itpro-tips.com/why-you-must-stop-using-seamless-sso/): When it comes to enabling Single Sign-On (SSO) on Windows devices, understanding the differences between Primary Refresh Token
- [Entra Connect health for ADDS on Core Server](https://itpro-tips.com/entra-connect-health-for-adds-on-core-server/): Official information from Microsoft Microsoft Entra Connect Health agents are not officially supported on Windows Core servers
- [KQL query examples for Microsoft Entra ID with Log Analytics (updated August 2026)](https://itpro-tips.com/kql-query-examples-for-microsoft-entra-id/): 💡The page is long, use table of contents to navigate more easily
- [Convert Microsoft 365 synced user to cloud only](https://itpro-tips.com/convert-microsoft-365-synced-user-to-cloud-only/): Introduction In Microsoft 365, managing user identities across on-premises and cloud environments is crucial for seamless
- [Solving the [uint] Error with New-HostedOutboundSpamFilterPolicy in ExchangeOnlineManagement](https://itpro-tips.com/solving-the-uint-error-with-new-hostedoutboundspamfilterpolicy-in-exchangeonlinemanagement/): If you've been working with some versions of ExchangeOnlineManagement, you might have encountered an issue with the
- [Enable the missing Copilot button in Microsoft 365 Apps desktop applications](https://itpro-tips.com/enable-the-missing-copilot-button-in-microsoft-365-apps-desktop-applications/): No Copilot icon in Word / Excel / PowerPoint / OneNote / Outlook You've activated Microsoft 365 Copilot, you can use it in the
- [Enable Copilot for Microsoft 365](https://itpro-tips.com/enable-copilot-for-microsoft-365/): Global availability for everyone Starting today (16 january) Copilot for Microsoft 365 is available for everyone
- [Protecting Microsoft Admin Portals with Conditional Access](https://itpro-tips.com/protecting-microsoft-admin-portals-with-conditional-access/): As of June 2023, this feature is still in Preview
- [End of Azure AD Connect Sync v1 on October 1, 2023](https://itpro-tips.com/end-of-azure-ad-connect-sync-v1-on-october-1-2023/): While I provide many versions of Azure AD Connect Sync on this blog, it's important to note that Azure AD Connect Sync v1 has
- [Enable Microsoft Authenticator Lite for Outlook mobile](https://itpro-tips.com/enable-microsoft-authenticator-lite-for-outlook-mobile/): Rollout has not yet completed across Outlook applications
- [Troubleshooting Office 365 Hybrid Configuration - Issues with new tenants and deprecated Remote PowerShell RPS](https://itpro-tips.com/office-365-hybrid-configuration-issues-with-new-tenants-and-deprecated-remote-powershell-rps/): Remote PowerShell (RPS) has been disabled by default in WorldWide cloud tenants and cannot be re-enabled
- [Remove-MgUser - Insufficient privileges to complete the operation](https://itpro-tips.com/remove-mguser-insufficient-privileges-to-complete-the-operation/): Encountering Insufficient Privileges Error in Microsoft Graph PowerShell If you are using Microsoft Graph PowerShell to manage
- [How to Configure Log File Settings for the Intune Management Extension Service](https://itpro-tips.com/how-to-configure-log-file-settings-for-the-intune-management-extension-service/): When using the Microsoft Intune cloud-based service to manage devices and applications, it's important to ensure that the
- [The risks of deploying apps from the Microsoft Store with Intune](https://itpro-tips.com/the-risks-of-deploying-apps-from-the-microsoft-store-with-intune/): The Microsoft Store can pose a significant risk to admins who use it to deploy apps through Intune
- [Get Azure AD SAML certificates details](https://itpro-tips.com/get-azure-ad-saml-certificate-details/): In SAML (Security Assertion Markup Language), certificate-based signing is important for ensuring the integrity and
- [New Setting Users Can Create Azure AD Tenants (updated 2024 new graph module)](https://itpro-tips.com/new-setting-users-can-create-azure-ad-tenants/): New setting means more control In november 2022 (I haven't the exact date but it seems since 18th november 2022), many folks
- [Download old Azure AD Connect versions / Entra Connect Sync [updated July2026]](https://itpro-tips.com/download-old-azure-ad-connect-versions/): 💡This page is updated as soon as a new version of Azure AD Connect/Entra Connect Sync is available
- [Microsoft 365 audit logs are now retained for 365 days for all tenants (with PowerShell)](https://itpro-tips.com/microsoft-365-audit-logs-are-now-retained-for-365-days-for-all-tenants-with-powershell/): Overview The Microsoft 365 audit log is the best place to identify user and admin actions (like track admin roles changes)
- [Get the Microsoft 365 admin roles and track the changes [updated january 2025]](https://itpro-tips.com/get-the-office-365-admin-roles-and-track-the-changes/): Admin roles are the key of your kingdom Office 365 allows organizations to granularly delegate administrative privileges
- [Force Intune settings sync on computers (updated 2026)](https://itpro-tips.com/force-intune-settings-sync-on-computers/): Default intervals Default refresh intervals for policies and compliance checks Intune sends a notification to the device to
- [This user's on-premises mailbox hasn't been migrated to Exchange Online](https://itpro-tips.com/this-users-on-premises-mailbox-hasnt-been-migrated-to-exchange-online/): Unable to create Exchange Online mailbox In Exchange on-premise migration to Office 365 (Exchange Online), the first step is
- [UserType empty in Microsoft 365 (updated July 2025)](https://itpro-tips.com/usertype-empty-in-microsoft-365/): Article updated in 2025 to switch to Microsoft Graph UserType is not always accurate for identifying external or member users

## Active Directory

- [List of Active Directory Schema GUIDs](https://itpro-tips.com/list-of-active-directory-schema-guids/): When creating Access Control Entries (ACEs) in Active Directory, it is often necessary to have the Globally Unique Identifier
- [Get the parent OU of an AD object.](https://itpro-tips.com/get-the-parent-ou-of-an-ad-object/): Get the OU of an AD object via parsing 💡Parsing consists in analyzing and slicing data or a character string to extract
- [ADMT - sIDHistory - Could not verify auditing and TcpipClientSupport on domains. Will not be able to migrate Sid's. Access is denied](https://itpro-tips.com/admt-sidhistory-tcpipclientsupport-acces-denied/): The problem When you migrate the SIDHistory, you may have the following problem
- [ADMT - NTLM authentication has been disabled](https://itpro-tips.com/admt-ntlm-authentication-has-been-disabled/): The error During a computer migration with AD (Active Directory Migration), you may encounter the following error in the error
- [I'm now Microsoft MVP Identity and Access!](https://itpro-tips.com/microsoft-mvp-en/): I'm proud to announce that I've been awarded the title of Microsoft MVP (Most Valuable Professional) in the 'Identity &
- [Download Road to Santa Cloud 365 Winter 2023 PDF](https://itpro-tips.com/download-road-to-santa-cloud-365-winter-2023-pdf/): In December 2023, I shared a series of RoadToSantaCloud365 posts on my social networks with Microsoft 365 as the theme
- [Download the AD Summer Workbook 2023 in PDF](https://itpro-tips.com/download-the-ad-summer-workbook-2023-in-pdf/): This summer of 2023, I shared a series of posts on LinkedIn/Twitter/Mastodon focused on a "summer workbook" dedicated to
- [Impact use Set-ADDefaultDomainPasswordPolicy](https://itpro-tips.com/impact-use-set-addefaultdomainpasswordpolicy/): CMDlet poses a problem if several GPOs with password settings The CMDlet Set-ADDefaultDomainPasswordPolicy achieves two things
- [Add an object temporarily to an AD group](https://itpro-tips.com/add-an-object-temporarily-to-an-ad-group/): When using Active Directory, it may be necessary to temporarily add a user to a group
- [Enable PAM (Privileged Access Management) in Active Directory](https://itpro-tips.com/enable-pam-privileged-access-management-in-active-directory/): This feature requires DCs and a forest functional level 2016
- [Creating dynamic AD objects](https://itpro-tips.com/creating-dynamic-ad-objects/): Create AD dynamic user L'objet sera supprimé dans une heure (3600 secondes) $TTLSeconds = 3600 $objectType = 'user'
- [Get AD groups with temporary members](https://itpro-tips.com/get-ad-groups-with-temporary-members/): Problem with -ShowMemberTimeToLive parameters To get temporary group members, you can use the built-in CMDlet
- [Detect the creation of AD dynamic objects](https://itpro-tips.com/detect-the-creation-of-ad-dynamic-objects/): When a dynamic object expires, it is completely deleted and does not go through the AD recycle bin
- [Property set Personal Information and Active Directory security and governance](https://itpro-tips.com/property-set-personal-information-and-active-directory-security-and-governance/): Active Directory (AD) is an essential tool for organizations to manage user access and authorization to various resources
- [Find attributes in a Property Set](https://itpro-tips.com/find-attributes-in-a-property-set/): I will show you three methods to get Property Set and the associated attributes
- [Get AD permissions with ADACLScanner (Updated December 2025)](https://itpro-tips.com/get-ad-permissions-with-adaclscanner/): ADACLScanner is a PowerShell tool, created by Robin Granberg (formerly a PFE at Microsoft and now at Semperis)
- [Securing Local Administrator Accounts with the new Windows LAPS - Active Directory](https://itpro-tips.com/securing-local-administrator-accounts-with-the-new-windows-laps-active-directory/): This article is divided into three parts
- [Out of the band updates for November 2022 updates](https://itpro-tips.com/out-of-the-band-updates-for-november-2022-updates/): Microsoft has released optional out-of-band (OOB) updates to fix known issues with Kerberos sign-in failures and other
- [KB5021131 - How To Detect RC4 Accounts](https://itpro-tips.com/kb5021131-how-to-detect-rc4-accounts/): In the Microsoft article about the November 2022 updates KB5021131 for CVE-2022-37966, Microsoft provides a detection rule
- [WMI Filter to identify 32 and 64 bits](https://itpro-tips.com/wmi-filter-to-identify-32-and-64-bits/): A lot of bad WMI filter on the Internet I create Group Policy Objects for years and I am often consulted to solve GPO issues
- [Remove cached password on RODC](https://itpro-tips.com/remove-cached-password-on-rodc/): Microsoft FAQ The FAQ on Technet said
- [Test AD authentication with PowerShell](https://itpro-tips.com/test-ad-authentication-with-powershell/): Test password Sometimes, it is useful to test Active Directory credentials to validate the login or the password
- [Powershell - Test if AD object exists](https://itpro-tips.com/powershell-test-ad-object-exists/): Be careful about the AD module When building PowerShell scripting with Active Directory, it is often useful to check if an AD
- [Install PowerShell Active Directory module](https://itpro-tips.com/install-powershell-active-directory-module/): To run PowerShell command for Active Directory (Get-ADUser, Get-ADComputer, Get-ADGroup, New-ADUser, etc.), the PowerShell

## Intune and endpoint management

- [Intune enrollment CNAME records: do you really need them?](https://itpro-tips.com/intune-enrollment-cname-records-do-you-really-need-them/): A recurring question when you set up Windows device management with Microsoft Intune
- [Intune Auto-enrollment: new setting to block MDM enrollment when adding a work or school account](https://itpro-tips.com/intune-auto-enrollment-new-setting-to-block-mdm-enrollment-when-adding-a-work-or-school-account/): Good news for Intune admins
- [Fixing ADMX Import Error in Intune: "NamespaceMissing:Microsoft.Policies.Windows"](https://itpro-tips.com/fixing-admx-import-error-in-intune-namespacemissing-microsoft-policies-windows/): When you try to import an ADMX file into Intune, you may encounter this error

## Windows and macOS

- [Remove OneDrive icons from an old tenant in Windows Explorer](https://itpro-tips.com/remove-onedrive-icons-from-an-old-tenant-in-windows-explorer/): OneDrive icons from previous tenants are still present in Explorer
- [Fix Windows Hello 0x80090010 NTE_PERM](https://itpro-tips.com/fix-windows-hello-0x80090010-nte_perm/): Update 29 September 2025 This problem was corrected on September 29, 2025 with the optional update KB5065789
- [Bypass Apple blocking when installing unverified software on macOS](https://itpro-tips.com/bypass-apple-blocking-when-installing-unverified-software-on-macos/): When installing software via a .pkg file downloaded from the Internet, macOS may display the following error
- [Export and import DNS conditional forwarders](https://itpro-tips.com/export-and-import-dns-conditional-forwarders/): DNS Conditional forwarders DNS conditional forwarders allow organizations to configure specific DNS servers to forward queries
- [Retrieving MSI file information with PowerShell](https://itpro-tips.com/retrieving-msi-file-information-with-powershell/): An MSI (Microsoft System Installer) file is a format specific to Microsoft used for installing applications on a Windows computer
- [Mitigate PetitPotam in Active Directory Certificate Services](https://itpro-tips.com/mitigate-petitpotam-in-active-directory-certificate-services/): 💡Please refer to the links at the bottom of this article for the most up-to-date links by Microsoft
- [Increase Windows and Applications logs size](https://itpro-tips.com/increase-windows-and-applications-logs-size/): Windows logs and Applications logs Each Windows version has built-in Event logs
- [Read events from event viewer faster in Windows](https://itpro-tips.com/read-events-from-event-viewer-faster-in-windows/): Slow Event Viewer from Windows 7/2008 version Everyone knows the Windows Event Viewer eventvwr.msc which sometimes takes many
- [Product key activation on Windows Server 2019 or 2022- 0x80070490](https://itpro-tips.com/product-key-activation-windows-server-2019-2022-0x80070490/): GUI does not work, use slmgr.vbs During the activation of Windows Server 2019 or 2022 through the graphical interface
- [Capture a network trace without installing anything on Windows](https://itpro-tips.com/capture-a-network-trace-windows/): Netsh the native tool on Windows On Microsoft Windows systems, you can perform a network capture without installing any tools

## PowerShell

- [PowerShell Copilot Assistant with Best Practices-The AI Advantage](https://itpro-tips.com/powershell-coding-assistant-with-best-practices-the-ai-advantage/): In the world where AI is omnipresent, I've always believed that while "artificial intelligence" is powerful, it cannot replace
- [How to get Microsoft Technet Gallery scripts](https://itpro-tips.com/how-to-get-microsoft-technet-gallery-scripts/): Microsoft closed Technet Gallery and Script Center in early 2021
- [Update all PowerShell modules at once](https://itpro-tips.com/update-all-powershell-modules-at-once/): If you download modules from PowerShell Gallery, you often need to update the module with Update-Module to be up-to-date
- [Invoke-WebRequest and Invoke-RestMethod failed with SSL/TLS](https://itpro-tips.com/invoke-webrequest-and-invoke-restmethod-failed-with-ssl-tls/): When running the Invoke-WebRequestor Invoke-RestMethod command, you may encounter this error

## Azure

- [Connect to Azure VMs using Azure Bastion: RBAC, group nesting and a PowerShell helper](https://itpro-tips.com/connect-to-azure-vms-using-azure-bastion-rbac-group-nesting-and-a-powershell-helper/): Azure Bastion is a managed jump-host service that lets you connect to Azure virtual machines over RDP or SSH without assigning

## AI tooling

- [Claude Cleaner: bulk delete Claude.ai conversations](https://itpro-tips.com/claude-cleaner-bulk-delete-claude-ai-conversations/): Claude.ai stores every conversation you have with the model in the sidebar
- [ChatGPT Cleaner: bulk delete and archive conversations](https://itpro-tips.com/chatgpt-cleaner-bulk-delete-and-archive-conversations/): ChatGPT lets you delete or archive conversations, but only one at a time
- [Claude Desktop no longer starts on Windows - bug in version 1.1.4173](https://itpro-tips.com/claude-desktop-no-longer-starts-on-windows-bug-in-version-1-1-4173/): Over the past few days, several users have reported that Claude Desktop on Windows may fail to start right after an automatic