User Profile
drkmccy
Brass Contributor
Joined 3 years ago
User Widgets
Recent Discussions
Can't license 365 groups anymore
Ever since group based licensing was moved from Entra to 365 admin, it's no longer possible to apply licenses to to 365 groups. This is clearly broken and needs fixing. What's the process to raise this with Microsoft? I tried using Graph but that's also broken, even when following the MS doc. I raised a support case but they guy that called back was absolutely useless, didn't even know what I was talking about.Can't license 365 groups anymore
Ever since group based licensing was moved from Entra to 365 admin, it's no longer possible to apply licenses to to 365 groups. This is clearly broken and needs fixing. What's the process to raise this with Microsoft? I tried using Graph but that's also broken, even when following the MS doc. I raised a support case but they guy that called back was absolutely useless, didn't even know what I was talking about.Re: Shared Channels - Can't share to a team on guest tenant
StevenC365 I tried all this in the web version of Teams. I'm the IT support for all these orgs so I can easily jump between the tenants. The accounts being used to share and accept are global admins and owners of several teams. I've also noticed that when I try to share the channel to an internal Team that I own, only one team shows up, when I'm in fact owner of several.... ?Shared Channels - Can't share to a team on guest tenant
I'm trying to sahre a channel to an external team. I've selected the option to sahre to a team, entered the team owner's email and when they try to accept the invite on their tenant, they get a message saying they are not an owner of a Team, when they very much are. Owner of many teams in fact. I can share with individual external users fine, the issue seems to be when sharing to external teams. Best.PST Import - TargetRootFolder not working?
Hi, I'm doing a tenant to tenant migration. I'm using the Compliance center to do a content search, I then export the PST files and Azure network upload to put them in blob storage. I then import them into the new tenant following this doc: https://docs.microsoft.com/en-us/microsoft-365/compliance/use-network-upload-to-import-pst-files?view=o365-worldwide#step-4-create-the-pst-import-mapping-file After the import is complete, there's a folder named after the old email address with a subfodler inside it named "Top of Information Store" and in there is where all the mail is. Now I'm getting tickets raised by users asking where their mail is. And no, telling them it's in that folder does not help. It has to be in the correct place so now I have to remote into people's mahcines and move the mail for them. I've read several places about making sure that TargetRootFolder is / and I did make sure that was the case but it seems to have ignored it. Here's basically what I used:Re: Automating Migration from AD to AAD (Non-Hybrid)
DanWheeler I swear there's not enough documentation out there and whatever bits there are, it's mostly only very specific to that one step and not as a whole migration. To answer your questions: Joining an AD device to AAD IS by definition a hybrid setup (Hybrid join). They can co-exist indefinitely. I've done a couple and the devices have been hybrid for years. I'm not a big fan but if the business is saying it wants to move to the cloud while at the same time not wanting to upgrade its legacy and on-prem apps, you have no choice. See below. This is the method that I've used on a few environments and works well: Create an Intune dynamic device group with the ZTDId rule (Google this) Setup a user driven Autopilotot profile and assign it to the group in step 1 Do this (again, why this isn't common knowledge is beyond me): https://euc365.com/enrol-devices-to-autopilot-unattended/ Push the script out to all your devices. I used our RMM tool to push the script to all our devices but you could use GPO Send a wipe command to all devices. I used this command and pushed it with RMM: https://techcommunity.microsoft.com/t5/windows-deployment/factory-reset-windows-10-without-user-intervention/m-p/1339823 Let the user enrol and sign into the device themselves. This might come as a shock to some but if you want to move forward, this is how it will be done (almost like zero touch on mobile). If Outlook breaks again, it's not worth spending hours trying to fix it, just send a blat command with Intune and let the user re-enrol from home.SPS-hireDate vs Azure AD custom security attribute
I'm trying to find out which is the better approach for storing an user's start date. I have tested using Power Automate to do an SPO http request and use the Graph API to update SPS-hireDate. This works but it seems a bit backwards to me. Feels like it should be an attribute that lives in Azure AD, not Sharepoint. So the other day I discovered Azure AD custom security attributes which seem to supersede the custom attributes in AD but with an access wall. I guess my question is: Do I use Azure AD custom attributes to store info like a users hire date, or should I use SPO user profiles as the attribute is there ready to go? It also have a feeling that MS is going to deprecate these attributes and replace them with something in the future because the only GUI way to get to it is by using the classic experience.
