How to Block and Unblock Users in Azure AD
Block and Unblock Users
Use the block and unblock users feature to prevent users from receiving authentication requests. Any authentication attempts for blocked users are automatically denied. Users remain blocked for 90 days from the time that they are blocked.
Block a User
1. Sign in to the Azure portal as an administrator.
2. Browse to Azure Active Directory > MFA Server > Block/unblock users. (https://storage.crisp.cSome readersHow to Setup MFA Conditional Access in Azure AD
To Configure your Conditional Access Policy
In the Azure portal, on the left navbar, click Azure Active Directory.
On the Azure Active Directory blade, in the Manage section, click Conditional access
On the Conditional Access blade,Some readersAzure VM-vhd
Azure VM-vhd
Troubleshoot classic storage resource deletion errors
This article provides troubleshooting guidance when one of the following errors occurs trying to delete Azure classic storage account, container, or *.vhd page blob file.
This article only covers issues with classic storage resources. If a user deletes a classic virtual machine using the Azure portal, PowerShell or CLI then the Disks aren't automatically deleted. The user gets the option to delete the "Disk" resourceSome readersHow to Join the VM to AAD-DS
Connect to the Windows Server. From the Start screen, open Server Manager.
Click Local Server in the left pane of the Server Manager window.
(data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAABAAAAAKtCAYAAAC5TxyJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsIAAA7CARUoSoAAAP+lSURBVHhe7N0FfBxl+gfw3+5m4+5pPGmsTZum7u5CBWo4h8MfvUPOOOyAA+6AAw4tTo26u2ukcXf37G6yrv/3nWzaNLW0tKWlz5fP0IzszOzu7Dvv+7wyokeSGy0ghBBCCCGEEEJuEBkvLEXCu8sBkci65OowtMlRvfYrhD/wgnXJr2fRqOD3+v2Y5uthXXJj+LpODrt3Some readersHow to Add Application for SSO in Azure
In Azure Portal, The applications can be found in the All Services > Enterprise Applications section of the portal.
Click on Add All Applications Add
Once in the gallery, you’ll see all our featured applications which support user provisioningSome readersHow to Add a user into a group
Login-to Domain Controller and open the Server Manager click on Tools and then Active Directory users and computers:
Navigate to the Group and double click on that to open properties:
Click on Members and then Add button:Few readersHow to Add Alias of a user in AD
Login to Domain controller:
In Server Manager click on Tools and then on Active Directory Users and Computers:
Right Click on the User whom Alias needs to be added: (https://storage.crisp.chat/users/helpdesk/website/29380cb7ddd7a200/3d50ecFew readersHow to Check Windows Server AD Health using Script
How to Check AD Health using Script
Download the AD Health check script file from
https://csquare1-my.sharepoint.com/:u:/g/personal/farooqriazcommunicationsquarecom/Eaj82ycT6cREhlF74FSwng4BOpI9NVRzPd4eHWpYMcBXA:
Now RightFew readersHow to Sync AD manually to Azure AD
How to Sync AD Manually?
To initiate a Delta Sync, open Windows PowerShell and run:
Start-ADSyncSyncCycle -PolicyType Delta
To initiate a Full Sync, open Windows PowerShell and run:
Start-ADSyncSyncCycle -PolicyType Initial
Note:
Full sync is the mechanism where all the data is verified from the source and updated. But with Delta Sync only changes are committed. Mostly in production daily we use delta because of heavy data. And full sFew readersDynamic Membership Rules
Dynamic Membership Rules
Steps To Create a Group Membership Rule:
Sign in to the Azure AD admin center with an account that is in the Global administrator, Intune administrator, or User administrator role in the Azure AD organization.
Search for and select Groups.
3. Select All groups and select New group.
On the Group page, enter a name and desFew readersTo Create a Group Membership Rule
To Create a Group Membership Rule
Sign in to the Azure AD admin center with an account that is in the Global administrator, Intune administrator, or User administrator role in the Azure AD organization.
Search for and select Groups.
Select All groups and select New group.
On the Group page, enter a name and description for the new group. Select a Membership tyFew readersHow to Turn on Fraud Alerts in Azure AD
How to Turn on Fraud Alerts for MFA
Sign in to the Azure portal as an administrator.
Browse to Azure Active Directory > MFA Server > Fraud alert.Set the Allow users to submit fraud alerts setting to On.
Select Save.
Reference Link:
https://docs.microsoft.com/en-us/azure/multi-factor-authentication/multi-factor-authenFew readersHow to Join Devices with AAD
Join Device with AAD
Click on Start and Launch the Settings app.
Next, navigate to Accounts.
Navigate to Access work or school.
Click Connect.
(https://storage.crisp.chat/users/helpdesk/websFew readersHow to Reset Password of a user from Windows Server AD
How to Reset Password of a user from AD
Login to Domain controller:
In Server Manager click on Tools and then on Active Directory Users and Computers:
Right Click on the User whom password needs to be reset and click on Reset PassworFew readersHow to change User Sign On method in Azure AD Connect
How to change User Sign On method in Azure AD Connect
Logon to the Domain Controller:
Right Click on Azure AD Connect and Run as Administrator:
Now click on Yes: (https://storage.crisp.chat/users/helpdesk/website/bce68b995263b800/f713f7Few readers