Category Archives: Office 365

Removing .onmicrosoft.com and .mail.onmicrosoft.com aliases from all groups, users and contacts in your Active Directory

My current customer had a little dabble in Office 365, they set up their Hybrid configuration and added their @xxx.onmicrosoft.com email alias to all their users and groups. This mostly happens automatically.

They then later decided to go with a new, different Office 365 tenant for production purposes, the old tenant was dismantled and the AADConnect server was deleted.

However, all AD objects still had their alias for the old Office 365 tenant, syncing that to the new tenant would be a bad idea and I cleaned that up just to be sure it wouldn’t cause trouble in the future, here’s how I did that:

cleanupAllADObjectProxyAddresses.ps1

O365GroupSync beta release

O365GroupSync is a tool that I am building for a large global NGO, because AADConnect creates Read-Only objects in Office 365.test

Read-Only objects cannot be edited in Office 365, thus users are unable to edit distribution lists in Office 365’s Outlook Web Accress (OWA) even if they are managers of said lists.

O365GroupSync was built to take over the synchronisation and initial seeding of all distribution lists, both ways, to allow users to edit distribution lists while in a hybrid Office 365 Exchange Online scenario, both on premises and in the cloud.

This beta version has been tested, but is not yet running in any production environments.

Get it here

New Azure Active Directory Powershell functions in v1.1.166.0 allow specifying global data location per service

The latest 1.1.166.0 release offers three new commands:

Get-MsolCompanyAllowedDataLocation
Retrieves all the current allowed data locations of a company from Azure Active Directory.
The Get-MsolCompanyAllowedDataLocation cmdlet can be used to retrieve all
the current allowed data locations of a company from Azure Active
Directory. If a company has not opted in the multinational feature or has
no allowed data locations, then the cmdlet will return an empty list.

Set-MsolCompanyMultiNationalEnabled

Enables the multinational feature for a service type for a company with Azure Active Directory.

The Set-MsolCompanyMultiNationalEnabled cmdlet will attempt to enable the multinational feature for a service type for a company in v1. Note that disabling/opting out from the multinational feature for a service type is not supported in v1. This cmdlet will return an error with the failure reason if the multinational feature for a service type cannot be enabled for a company.

Example: Set-MsolCompanyMultiNationalEnabled -ServiceType MicrosoftCommunicationsOnline -Enable $True

Set-MsolCompanyAllowedDataLocation

Sets an allowed data location for a service type for a company in Azure Active Directory.

The Set-MsolCompanyAllowedDataLocation cmdlet will attempt to set an allowed data location or update an existing allowed data location for a service type for a company in v1.

Example:  Set-MsolCompanyAllowedDataLocation -ServiceType
MicrosoftCommunicationsOnline -Location EUR