Checks the current status of connections to (and as required, prompts for login to) various Microsoft Cloud platforms.

Secure Authentification Request for your Intune/Entra ID devices to use agains Azure Function Apps.

A PowerShell toolbox for Microsoft 365 security fans.

Maester is an automation framework to assess and monitor your Microsoft 365 security configuration.

Automatic Documentation of M365 to simplify the life of admins and consultants.

This module provides functions to support Azure AD Connect operations, diagnostics and troubleshooting.

Manage PIM Azure Resource, PIM Entra role and PIM for Group settings and assignments with simplicity in mind

A PowerShell module for working with custom security attributes at scale. The module enables easy interaction with custom security attributes, as well as a simplified way of synchronizing HR data to Entra ID custom security attributes, by providing a lookup feature.

Get Tokens from Entra ID

The goal of this script is to help with the import process of a device into AutoPilot and simplifying this by using a User Interface (GUI). You will be able to select a Group Tag if you use them and the script will reboot after the deployment profile was successfully assigned. It will also help to troubleshoot possible Network requirements by runni... More info

Helper module manage the Entra ID device-bound passkey preview feature for your organization.

Allows administrative registration of passkeys (i.e. FIDO2 security keys and Microsoft Authenticator mobile app) in Microsoft Entra ID (formerly Azure Active Directory) through the Microsoft Graph API.

Script to activate Eligible roles or Grpups in Entra ID PIM for a user

Making the end-user experience of Entra ID PIM slightly easier.

Checks a domain's Office 365 DNS records for correctness.

Module to Resolve Entra ID GUIDs into defined names, mails... and vice versa.

Get multi tenant tokens using managed identity.

Azure Runbook - Dynamic Group - MFA State This script is designed for an Azure Runbook to assign users to two Azure AD groups based on their MFA capability (capable / non-capable). Before running the runbook, you need to set up an automation account with a managed identity. The managed identity requires the following Graph Permissions: - User.... More info

PowerShell functions for administration of Microsoft 365 services using Graph endpoints

Synchronizes devices in the target device group based on the primary users in the source user group. - Adds missing devices. - Removes devices that no longer belong. - Updates the group description with the device count. - Allows filtering by OS type and ownership.