automation
5 TopicsUnsupported but very useful way to use the hidden Azure API
Obviously not supported, but for those of us managing many tenants and/or setting up (test/training/pilot) tenants often, you may want to automate certain Azure AD or Intune settings that are not available through supported API's or PS modules, there is a 'hidden' API at https://main.iam.ad.ext.azure.com/api, here's an example: http://www.lieben.nu/liebensraum/2018/03/set-intune-mdm-user-scope-to-all-using-powershell-and-hidden-api/ If you want to use this in a production environment, I recommend doing only READ operations.Solved18KViews3likes6CommentsAzure Powershell DSC vs Ansible
Hey Guys, I just want to find out what are you using for Desired State Configuration on Azure. Do you use built in Powershell DSC or you are using Ansible with DSC enabled for Windows Machines? I am in the process of deciding which solution should the best for us. Also I would like to automate on-prem infrastructure. Which solution do you use? Regards, Wojciech21KViews0likes7Commentscannot find the correct module to use Exchange cmdlets
I want to use some Exchange cmdlets in Automation account, and I suppose I need to import a Exchange module for this - but I cannot find the correct module. Does anyone know? I would like to use these two cmdlets in Automation account (Powershell runbook) to add an user to a group, and to give permission to shared mailbox: Add-UnifiedGroupLinks (documentation at https://docs.microsoft.com/en-us/powershell/module/exchange/add-unifiedgrouplinks?view=exchange-ps) Add-MailboxPermission (documentation at https://docs.microsoft.com/en-us/powershell/module/exchange/add-mailboxpermission?view=exchange-ps) Something like this Param ( [string] $Employee = "" ) $credObject = Get-AutomationPSCredential -Name "O365servicekonto" Connect-AzureAD -Credential $credObject $User = Get-AzureADUser -ObjectId $Employee Set-AzureADUser -ObjectId $User.ObjectId Add-MailboxPermission <email of the shared mailbox> -User $Employee -AccessRights FullAccess -InheritanceType all670Views0likes0CommentsAD groups in update management (azure automation accounts)
Hi, i think i need help regarding the Azure automation acccounts update management. Our goal is to centraly update our on-prem Windows servers. To achive this i installed the monitoring agent on a few test machines. (The machines appeared inside the update management already) Now i want to create deployment schedules based on groups. (DCs, Fileserver, Database server, ...) In the "New update deployment" blade i'm able to select "Groups to update" or "Machines to update". When using "Groups to update" i need to have groups based on queries. When using "Machiines to update" i've seen that i can choose "imported groups (AD/WSUS/SCCM)" from the dropdown. I enabled the Groupsync option in my log analytics workspace already (advanced settings > computer groups > Active Directory > Import ..). When looking back at the "Machines to update" blade i can only see 3 groups, but not the groups i would like to use. (There are two custom groups visible and the "domain computers" group) The on-prem groups i would like to use are normal global security groups and the're synced via AADC. So at this moment i really don't know why my prefered groups are not visible. Any help is highly appreciated. 🙂3.7KViews0likes3Comments