Expiring app credentials with no owner are a familiar Microsoft Entra headache. This PowerShell approach helps you identify whether a certificate or client secret is actually being used by correlating app registration credentials with service principal sign-in logs.
Need to know who actually read an internal email in Exchange Online? This approach starts with Message Trace V2 to identify who truly received the message, then uses Microsoft Graph to check the IsRead flag in each recipient mailbox via internetMessageId. The result is a practical read/unread report with a clear summary and optional CSV export without scanning every mailbox in the tenant.
The third post in the TinyAddicts series. A reliable one-liner to list all Microsoft 365 users without an assigned license – great for cleanup and provisioning reviews.
Learn how to identify legacy Exchange ActiveSync clients after Microsoft advisory MC1197103. This post shows a practical PowerShell approach to reporting outdated EAS client versions in Exchange Online.
A practical PowerShell approach to reporting Microsoft Entra ID authentication methods at scale. This post shows how to collect tenant-wide authentication data using Microsoft Graph, generate detailed and pivot reports, and understand which methods users really have configured beyond what the portal shows.
When a user who created a Bookings page is deleted from Microsoft 365, the Scheduling Mailbox loses its owner. This post shows how to detect these orphaned Booking pages using PowerShell and how to reassign a new administrator.
Testing and monitoring Conditional Access policies is much easier when you analyse real sign-in data instead of clicking through the portal. This script uses PowerShell and a Kusto query against the SigninLogs table in Log Analytics to report how a specific CA policy is evaluated, with options for summary output and full CSV export.
Going through individual mailboxes in the Exchange Admin Center doesn’t scale. This PowerShell script generates a detailed mailbox properties report for user and shared mailboxes in Exchange Online, including size, quota usage, archive status, forwarding, and holds, with output exported to CSV for further analysis.
The second post in the TinyAddicts series – a quick PowerShell script to find all mailboxes in Exchange Online that have forwarding enabled, either to internal or external addresses.
If you’re still using AzureAD or MSOnline modules, you’ve probably already seen the deprecation warnings. The future of managing Microsoft 365 and Entra ID is all about Microsoft Graph, and if you’re a PowerShell person, the Microsoft Graph PowerShell SDK is where you want to be.
