How To

New Crucial Audit Events Added to Office 365

by Tony Redmond

Helping Investigators Understand What Happened In March, Microsoft eventually released the MailItemsAccessed “crucial audit event” for accounts holding Office 365 E5 licenses (other suitable licenses include Microsoft 365 E5 or the Microsoft 365 E5 compliance). Crucial events are deemed to be of higher value to investigators or others who need to understand exactly what happened… Read More

Working with Azure AD Administrative Units

with 2 Comments by Tony Redmond

Logical Division of Azure Active Directory Management Since its launch in 1999, Active Directory has used Organizational Units (OUs) to logically partition the directory. Despite discussions going back as far as 2014, the ability to partition Azure Active Directory in the same or an equivalent manner wasn’t available. Administrative Units (AUs), launched in public preview… Read More

Using Windows PowerShell Modules in PowerShell 7

by Adam Bertram

With the advent of PowerShell Core and PowerShell 7, not all modules have been updated to be compatible with core engine updates or cross-platform accessibility. Instead of needing to switch between multiple versions of PowerShell depending on the tasks at hand, PowerShell 7 has added compatibility layers for existing Windows PowerShell compatible modules.

Understanding Azure App Registrations

by Adam Bertram

Microsoft offers a robust identity platform, but to facilitate authentication and authorization applications need to be registered. To that end, within Azure AD you will find the App registrations pane that offers the ability to create registrations for applications and assign permissions accordingly.

Use a Super User Group for Privileged Access to Encrypted Office 365 Content

by Tony Redmond

Controlling Access to Sensitive Content A recent Microsoft Technical Community article covers how to use Azure AD Privileged Identity Management to control access to the super-user permission for Azure Information Protection. An account holding super-user permission can access any content protected (encrypted) by an Azure Information Protection or Office 365 sensitivity label. I don’t intend… Read More

Outlook Mobile Ceasing Support for iOS 12 Soon

by Tony Redmond

Outlook Prepares for the Coming of iOS14 Apple’s much-awaited release of iOS 14 is due this Fall. According to Office 365 notification MC221506 published on 4 September, a consequence of the release is that Microsoft will adjust its minimum iOS system requirements for Outlook for iOS and watchOS. Microsoft has always supported the two most… Read More