Comprehensive guides for Exchange Server, Office 365 migrations, Graph API automation, and Azure Active Directory / Entra ID identity security.
HA, DAG, Migration, and Mailbox Troubleshooting (70+ posts)
Administrative one-liners, cmdlets, and scripts (50+ posts)
Tenant administration, licensing, and cloud identity
PIM, Entra ID, SPF/DKIM/DMARC, and token authentication
Microsoft is retiring Direct Certificate-Based Authentication (CBA) for Exchange ActiveSync in Exchange Online at the end of 2026. Learn how to audit ActiveSync devices in PowerShell and transition to Microsoft Entra ID CBA.
Complete enterprise runbook for the Exchange Online EWS retirement. Audit active EWS applications in Entra ID, enforce EwsApplicationAccessPolicy AllowLists in PowerShell, and migrate legacy EWS scripts to Microsoft Graph.
Microsoft is retiring the -Credential parameter in Connect-ExchangeOnline and Connect-IppsSession in December 2026. Learn how to migrate unattended PowerShell scheduled tasks to Certificate-Based App-Only Authentication.
Don't leave parked or default .onmicrosoft.com domains vulnerable to spoofing. Run this Microsoft Graph and Exchange Online PowerShell script to audit SPF, DKIM, and DMARC across every domain in your tenant.
Protect your Exchange Online custom domains from SMTP TLS downgrade and adversary-in-the-middle attacks. Step-by-step PowerShell guide to enabling DNSSEC and Inbound DANE (Enable-DnssecForVerifiedDomain & Enable-SmtpDaneInbound).
Stop legitimate inbound emails from failing DMARC in complex routing topologies. Learn how to configure Trusted ARC Sealers in Exchange Online using Set-ArcConfig and verify ARC headers with PowerShell.
Solve the offboarding nightmare of orphaned calendar series in Exchange Online. Learn how to use Invoke-ChangeMeetingOrganizer with PowerShell to transfer recurring meeting ownership seamlessly.
Prepare your Active Directory for Exchange Server Subscription Edition (SE) Cumulative Updates. Learn how to detect and cleanly purge orphaned Exchange 2013, 2016, and 2019 server objects from AD configuration to prevent hard-block setup failures.
Microsoft Entra SSPR now only accepts authentication methods users have explicitly registered. Use this Microsoft Graph PowerShell runbook to find users relying on directory phone attributes and remediate before the helpdesk queue explodes.
A production-ready PowerShell runbook to audit all Microsoft Entra dynamic groups and Administrative Units using the retired memberOf rule operator, preventing broken licensing and access policies.
A complete enterprise runbook covering the in-place upgrade path from Exchange Server 2019 to Exchange Server Subscription Edition (SE), prerequisite verification, and Active Directory prep.
A complete sysadmin guide to transitioning your Microsoft Graph PowerShell SDK automation from legacy Windows PowerShell 5.1 to modern PowerShell 7.x.
Complete guide to Exchange Server Subscription Edition (SE) licensing: how Standard vs. Enterprise Server and CAL licenses work, reusing Exchange 2019 product keys, Hybrid Edition keys, and PowerShell activation.
🔍 How to Log SSL/TLS Protocols in IIS for Exchange Server Hey Exchange admins Ever wondered which TLS protocols your clients are actually using to connect t...
📚 How to Plan Your Upgrade to Exchange Server Subscription Edition Welcome back, Exchange admins and hybrid champions Now that we know Exchange Server Subsc...