Windows LAPS with Intune and Entra ID: Setup and Retrieval
Back up Windows LAPS passwords to Microsoft Entra ID with Intune: tenant setting, policy, event 10029, retrieval with Get-LapsAADPassword or Graph, and legacy LAPS migration.
October 6, 2026
Intune Device Compliance Report: PowerShell Script via Graph
Free PowerShell script that exports Intune managed devices with compliance state, OS, last sync, user and encryption from Microsoft Graph to CSV or HTML.
October 6, 2026
Microsoft 365 User Offboarding PowerShell Script (with -WhatIf)
Free PowerShell script for Microsoft 365 offboarding: block sign-in, revoke sessions, shared mailbox, auto-reply, forward to manager, groups and licences, with -WhatIf and a log.
October 6, 2026
Employee Offboarding Checklist: Secure AD, M365 and Workspace Steps
A practical leaver checklist covering Active Directory disable and group cleanup, Microsoft 365 session revocation and mailbox conversion, Google Workspace suspension and data transfer, Zoho user deactivation, plus shared credentials, devices and verification steps.
September 29, 2026
Microsoft 365 shared mailbox vs distribution group vs Microsoft 365 Group
Understand when to use a shared mailbox, a distribution group or a Microsoft 365 Group for addresses like support@ or sales@, with the licensing, storage, Send As, Teams and archiving implications and the PowerShell to create and convert each.
September 29, 2026
Microsoft 365 SPF DKIM DMARC: Secure Exchange Online Setup
Publish a correct SPF record for Exchange Online, enable DKIM signing for each custom domain with the selector CNAMEs or Exchange Online PowerShell, add a DMARC policy that starts in monitoring mode, and verify alignment with message headers and reports.
September 29, 2026