Microsoft Entra
You are viewing all posts in the Microsoft Entra category.
The art of Dynamic Groups in Microsoft Entra
Dynamic Groups are really great for automating certain things. They are basically like groups like we know them for several years but they always required some sort of manual action or assignment. Dynamic Groups will help us eliminating this. I will give some examples how I...
CWL Azure Red Team Certification - What I learned
In the first half of 2026 I followed a paid course on Cyberwarfare.live. The CWL Certified Azure Red Team Specialist (AzRTS) course. On this page I will not dive deep into the topics themselves or step by step hacking but took some notes from what I...
Get notifications when Entra ID break glass admins are used
As we want to secure our Break Glass Accounts as good as possible, we cloud want to get alerts when break glass admins are used to login. Maybe they are used on a daily basis, or are being attacked. When we configure notifications, we instantly know...
How to properly secure Break Glass Accounts in your Entra ID
In our environment, we will do everything to secure it as much as possible. We give users only the permissions they need and only at given times, we enable Conditional Access to limit access to our data as much as possible. But we also create Break...
Disable AD synchronization for a single user in Microsoft Entra ID
This guide describes how to disable Active Directory synchronization for a single user by transferring the user's Source of Authority to Microsoft Entra ID. This allows you to manage individual users from the cloud while keeping Entra Connect Sync enabled for the rest of your organization.
Remove Universal Print Devices/Connectors
In this guide, I’ll show you how to remove Universal Print connectors using PowerShell, because this cannot be done from the Universal Print portal.
Solved - ADSync service stopped (Entra Connect Sync)
This blog post helps you to make the ADSync service more stable by utilizing a script that checks the service regularly and starting it when needed.
Match AD users using Entra Connect Sync and MSGraph
Sometimes, it is necessary to match an existing local Active Directory (AD) user through Entra Connect with an existing Entra ID user (formerly known as Azure AD). This process ensures that the account in both environments is aligned and maintains the same underlying configurations and settings...
Implement Certificate-based authentication for Entra ID scripts
When using Entra ID, we can automate a lot of different tasks. We can use a script processing server for this task but doing that normally means we have to save credentials or secrets in our scripts. Something we don't want. Today I will show how...
Audit your Entra ID user role assignments
Today I have a relatively short blog post. I have created a script that exports all Entra ID user role assignments with Microsoft Graph. This can come in handy when auditing your users, but then realizing the portals doesn't always show you the information in the...