User Profile
JosLieben
Iron Contributor
Joined 8 years ago
User Widgets
Recent Discussions
Reporting on all object level permissions for all users in Teams, Sharepoint and Onedrive
For e.g. auditing, identifying misconfigurations or to get a 360 view of a specific user's full permissions I wrote a PowerShell module that will create a CSV, XLSX or HTML file for you with all unique permissions per user (or group if you omit -ExpandGroups) for a given site or team. You can find it as TeamPermissions in the PSGallery and/or at my blog for more info:https://www.lieben.nu/liebensraum/2024/08/microsoft-teams-permission-auditing/Full AzureAD application permissions overview
So you’d like to know which applications are living in your AzureAD? And you’d like to know which of those were added by your admins, and what permissions those applications have? And you’d also like to know which applications your users are consenting to, and what rights those applications have on your users? Look no further, I wrote a FREE Powershell script to export all of that to Excel for you! Application overview Apps an admin has consented to and the type of rights it needs Apps a user has consented to and the type of rights it needs Apps to user mapping, for an easy overview of which user has consented to which app More info at my blog: https://www.lieben.nu/liebensraum/2018/07/full-azuread-applications-permission-overview/Onedrive for Business silent configuration and folder redirection through Intune MDM for Windows 10
UPDATE: superceded byhttps://www.lieben.nu/liebensraum/2019/06/ultimate-folder-redirection-for-onedrive-teams-and-sharepoint/ I’ve taken information from several sources and written a single “Do It All – Onedrive For Business configuration script” for the Windows 10 Modern Management (Intune MDM Azure AD Join) scenario. The script can be deployed through Intune to your Windows 10 MDM clients and will do the following silently: check latest O4B version and update to it detect O4B configuration, start auto config completely silent / invisible configuration with SSO optionally, redirect folders to Onedrive optionally, copy old content More here :)O4BClientAutoConfig + source code.The ULTIMATE #Onedrive #Teams #Sharepoint sync config and redirection solution
The ULTIMATE #Onedrive #Teams #Sharepoint sync config and redirection solution for #Intune : https://www.lieben.nu/liebensraum/2019/06/ultimate-folder-redirection-for-onedrive-teams-and-sharepoint/ Single PS script User does NOT have to be an Admin Per special folder configuration of redirection settings Extra (symlink) redirection for ANY folder (specific appdata subfolders anyone?) Automatically runs at logon and/or at specified intervals Can be unassigned (removing a user from the target group in Intune stops the script from running) Can redirect to subfolders, even nested Handles automatic creation of any folders Supports variables in paths Registers Environment Variables for the new locations if you configure it to Can hide target folders (appdata likes to hide)Simple method to run logon / recurring scripts in Intune!
Happy to share my latest Intune script :) It does not use scheduled tasks and allows you set a recurring time for the script to rerun and/or just to run at every logon: https://www.lieben.nu/liebensraum/2019/06/simplify-logon-scripts-in-intune-without-schedules/ The advantage is that when you unassign the script from a user, no scheduled task remains that ignorantly keeps running the script :)Re: Script to delete Shared With Me links
here's an example script that gets that info for you: https://techcommunity.microsoft.com/t5/OneDrive-for-Business/How-do-I-get-a-list-of-all-O4B-files-shared-with-others-for-all/td-p/142674 Removing the links is not included there though, but it's a good starting point.Re: Assigning Licences to Different Sub-Groups
Not natively, you'd need to abstract that layer through automation. Office 365 / Azure only has Group Based licensing, but this does not allow you to set a maximum on a group. Using, e.g., a scheduled Powershell script (as a runbook or locally) you could implement what you desire.
