Comprehensive guides for Exchange Server, Office 365 migrations, Graph API automation, and Azure Active Directory / Entra ID identity security.
HA, DAG, Migration, and Mailbox Troubleshooting (70+ posts)
Administrative one-liners, cmdlets, and scripts (50+ posts)
Tenant administration, licensing, and cloud identity
PIM, Entra ID, SPF/DKIM/DMARC, and token authentication
Microsoft is retiring the -Credential parameter in Connect-ExchangeOnline and Connect-IppsSession in December 2026. Learn how to migrate unattended PowerShell scheduled tasks to Certificate-Based App-Only Authentication.
Don't leave parked or default .onmicrosoft.com domains vulnerable to spoofing. Run this Microsoft Graph and Exchange Online PowerShell script to audit SPF, DKIM, and DMARC across every domain in your tenant.
Protect your Exchange Online custom domains from SMTP TLS downgrade and adversary-in-the-middle attacks. Step-by-step PowerShell guide to enabling DNSSEC and Inbound DANE (Enable-DnssecForVerifiedDomain & Enable-SmtpDaneInbound).
Stop legitimate inbound emails from failing DMARC in complex routing topologies. Learn how to configure Trusted ARC Sealers in Exchange Online using Set-ArcConfig and verify ARC headers with PowerShell.
Solve the offboarding nightmare of orphaned calendar series in Exchange Online. Learn how to use Invoke-ChangeMeetingOrganizer with PowerShell to transfer recurring meeting ownership seamlessly.
Prepare your Active Directory for Exchange Server Subscription Edition (SE) Cumulative Updates. Learn how to detect and cleanly purge orphaned Exchange 2013, 2016, and 2019 server objects from AD configuration to prevent hard-block setup failures.
Microsoft Entra SSPR now only accepts authentication methods users have explicitly registered. Use this Microsoft Graph PowerShell runbook to find users relying on directory phone attributes and remediate before the helpdesk queue explodes.
A production-ready PowerShell runbook to audit all Microsoft Entra dynamic groups and Administrative Units using the retired memberOf rule operator, preventing broken licensing and access policies.
A complete enterprise runbook covering the in-place upgrade path from Exchange Server 2019 to Exchange Server Subscription Edition (SE), prerequisite verification, and Active Directory prep.
A complete sysadmin guide to transitioning your Microsoft Graph PowerShell SDK automation from legacy Windows PowerShell 5.1 to modern PowerShell 7.x.
💼 Exchange Server Subscription Edition Licensing Explained: What's New, What's Gone Hey Exchange admins and licensing warriors In our last posts, we covered...
🔍 How to Log SSL/TLS Protocols in IIS for Exchange Server Hey Exchange admins Ever wondered which TLS protocols your clients are actually using to connect t...
📚 How to Plan Your Upgrade to Exchange Server Subscription Edition Welcome back, Exchange admins and hybrid champions Now that we know Exchange Server Subsc...
📢 Welcome Back Exchange Server: Subscription Edition Series Unpacked Hey IT Pros, Exchange admins, and hybrid warriors If you've been snoozing on Exchange S...
Complete step-by-step guide to configuring OAuth 2.0 Client Credentials Flow (SMTP.SendAsApp) for unattended SMTP AUTH mail relay in Exchange Online using Microsoft Graph PowerShell, New-ServicePrincipal, and XOAUTH2.