Microsoft 365

New Setting Users Can Create Azure AD Tenants (updated 2024 new graph module) Members

New setting means more control In november 2022 (I haven't the exact date but it seems since 18th november 2022), many folks warned on a new setting in Azure AD: "Users can create Azure AD tenants". What? Microsoft created a new security hole? 😱 This setting is

Bastien Perez
Bastien Perez
Microsoft 365

Download old Azure AD Connect versions / Entra Connect Sync [updated July2026] Members

💡This page is updated as soon as a new version of Azure AD Connect/Entra Connect Sync is available. If you work with Microsoft 365, Azure AD Connect (Entra Connect Sync) is the masterpiece to synchronize the on-premise Active Directory to Azure Active Directory. Microsoft provides 12 months support

Bastien Perez
Bastien Perez
Microsoft 365

Augmentation des audits logs à 365 jours dans Microsoft 365 (with PowerShell) Members

Présentation Le journal d’audit de Microsoft 365 est le meilleur endroit pour identifier les actions utilisateurs et administrateurs (comme la liste des changements de droits sur les comptes admins). Par défaut, la rétention standard est limitée à 90 jours (180 jours depuis le 17 octobre 2023), sauf pour les

Bastien Perez
Bastien Perez
Microsoft 365

Microsoft 365 audit logs are now retained for 365 days for all tenants (with PowerShell) Members

Overview The Microsoft 365 audit log is the best place to identify user and admin actions (like track admin roles changes). By default, standard retention is limited to 90 days (180 days since October 17, 2023), except for tenants with Office 365 E5 or Microsoft 365 E5 licenses who can

Bastien Perez
Bastien Perez
Microsoft 365

Get the Microsoft 365 admin roles and track the changes [updated january 2025] Members

Admin roles are the key of your kingdom Office 365 allows organizations to granularly delegate administrative privileges. Office 365 contains a lot of built-in aministrative roles. Among them we find Global Administrator, Exchange administrator, User Account Administrator, Billing Administrator, Global reader, etc. Those privileges must be audited regularly. When

Bastien Perez
Bastien Perez
Microsoft 365

Force Intune settings sync on computers (updated 2026) Members

Default intervals Default refresh intervals for policies and compliance checks Intune sends a notification to the device to check in with the service. The timing of these notifications can vary, ranging from immediately to several hours. The frequency of these notifications can also differ depending on the platform. Microsoft documentation

Bastien Perez
Bastien Perez
Microsoft 365

Forcer la synchronisation des paramètres Intune [2026] Members

Intervalles de rafraîchissement par défaut pour les politiques et les contrôles de conformité Intune notifie l'appareil de se connecter au service Intune. Les délais de notification varient selon les systèmes d'exploitation et le temps depuis lequel il est enrôlé dans Intune. La documentation Microsoft indique : Plateforme

Bastien Perez
Bastien Perez
Microsoft 365

This user's on-premises mailbox hasn't been migrated to Exchange Online Members

Unable to create Exchange Online mailbox In Exchange on-premise migration to Office 365 (Exchange Online), the first step is often to create users (except if cutover migration). Most of the time, the Microsoft Azure Active Directory Connect (AAD Connect) tool is used. If Exchange mailboxes exist on-premise, the

Bastien Perez
Bastien Perez
Microsoft 365

La boîte aux lettres locale de cet expéditeur n’a pas été migrée vers Exchange Online Members

Impossible de créer une boîte aux lettres Exchange Online Lors d'une migration d'Exchange on-premise vers Office 365 (Exchange Online), la première étape consiste souvent à créer des utilisateurs. La majorité du temps, c’est l’outil de Microsoft Azure Active Directory Connect (AADConnect) qui est

Bastien Perez
Bastien Perez
Microsoft 365

UserType empty in Microsoft 365 (updated July 2025) Members

Article updated in 2025 to switch to Microsoft Graph UserType is not always accurate for identifying external or member users If you search an Office 365 user with Get-MgUser (or legacy CMDlets Get-AzureADUser or Get-MsolUser), you get details about the account type with the attribute UserType. The

Bastien Perez
Bastien Perez
Microsoft 365