For some time now I’ve been using the Microsoft Exchange Online Powershell Module that supports Azure multi-factor authentication (MFA) , but for an unknown reason it stopped working
When trying to connect to Exchange Online PowerShell using the code below with a global administrator account, I was getting an access denied error:
Connect-EXOPSSession -UserPrincipalName admin.bjorn@mydomain.nl
New-ExoPSSession : Create PowerShell Session is failed using OAuth
At C:\users\admin\adppdata\local\Apps\2.0\84VE2AT5.PKO\HHYLAA32.DC7\micr..tion_c3bce3770c238a49_0010.0000_90fa60bba125a33a\CreateExoPSSession.ps1:179 char:22
+ ... PSSession = New-ExoPSSession -UserPrincipalName $UserPrincialName -C ...
+
+ CategoryInfo : NotSpecified: (:) [New-ExoPSSession], Exception
+ FullyqualifiedErrorID : System.Exception,Microsoft.Exchange.Management.ExoPowerShellSnapin.NewExoPSSession
For me the solution was to install the Microsoft Exchange Online Powershell Module through Programs and then reinstalling it.
For more information about the new Exchange Online PowerShell module that supports Azure multi-factor authentication (MFA) see: https://technet.microsoft.com/en-US/library/ms.exch.eac.EXORPSMFAModuleLearnMore(EXCHG.150).aspx?v=15.1.860.4&l=1&s=BPOS_S_E15_0
Like this:
Like Loading...
Tags: Connect-EXOPSSession, Create PowerShell Session is failed using OAuth, Exchange online, Exchange Online PowerShell, MFA, multi-factor authentication, New-ExoPSSession, Office 365, outlook.office365.com, Powershell
When trying to connect to Exchange Online PowerShell using the code below with a global administrator account, I was getting an access denied error:
$usercredential = get-credential
$Session = New-PSSession -ConfigurationName Microsoft.Exchange -ConnectionUri<span class="Apple-converted-space"> </span>https://outlook.office3
65.com/powershell-liveid/ -Credential $UserCredential -Authentication Basic -AllowRedirection
New-PSSession : [outlook.office365.com] Connecting to remote server outlook.office365.com failed with the following
error message :
[ClientAccessServer=VI1PR08CA0018,BackEndServer=,RequestId=1c6b263f-08cf-4885-937c-e9c9808ddf89,TimeStamp=1/12/2017
2:46:41 PM] Access Denied For more information, see the about_Remote_Troubleshooting Help topic.
At line:1 char:12
+ $Session = New-PSSession -ConfigurationName Microsoft.Exchange -Conne ...
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : OpenError: (System.Manageme....RemoteRunspace:RemoteRunspace) [New-PSSession], PSRemotin
gTransportException
+ FullyQualifiedErrorId : -2144108477,PSSessionOpenFailed
I was able to succesfully logon to https://login.microsoftonline.com/ so the credentials were correct.
Also I had not enabled Multi-factor authentication because I knew this could be a problem.
I tried clearing credentials / cookies in browsers and credential manager.
Since this did not solve the issue, I started to search online for answers. The first result was : https://support.microsoft.com/en-gb/kb/2905767 which suggested I entered the wrong username/password or that I didn’t have the correct permissions (organization administrator).
Both where not the case.
I then came across this post where someone apparently had to reset the password: https://answers.microsoft.com/en-us/msoffice/forum/msoffice_o365admin-mso_manage/exchange-online-remote-powershell-access-denied/b91205bf-3419-4251-badc-4181af701d4f , but this was also not the case for me.
So I tried using the new Exchange Online PowerShell module that supports Azure multi-factor authentication (MFA) and the Connect-EXOPSSession cmdlet which did seem to work.
As it turns out, I accidentally tried to logon using <domain>\username instead of using my User Principal Name (UPN). When using my UPN it worked perfectly.
As a bonus though, now I have no excuse anymore to start testing with MFA
For more information about the new Exchange Online PowerShell module that supports Azure multi-factor authentication (MFA) see: https://technet.microsoft.com/en-US/library/ms.exch.eac.EXORPSMFAModuleLearnMore(EXCHG.150).aspx?v=15.1.860.4&l=1&s=BPOS_S_E15_0
Like this:
Like Loading...
Tags: Access Denied, Connect-EXOPSSession, Exchange online, Exchange Online PowerShell, MFA, multi-factor authentication, Office 365, outlook.office365.com, Powershell
As some of you might know already, the Microsoft Ignite 2015 conference has started where Microsoft talks about where they’re going and what they’re doing. I watched the keynote, took many notes and added other relevant information which I’m sharing with you. Since so much was told and shown it’s certain I’ve missed stuff. As time goes by I will update the information in this post so it can be used as a reference.
I hope it’s useful. If you find any errors or have other useful resources or feedback, please leave a comment.
Update log:
-05-05-2015: Created Initial version including the keynote and additional information.
-
General information:
-
Enterprise Mobility Suite
-
SQL Server 2016
-
Windows Server 2016
-
System Center 2016
-
Operations Management Suite
-
Windows 10
-
Enterprise
-
Trustworthy
-
Security is #1 concern
- Balance between empowerment and security must be the goal
-
Modern architecture high level:
- Key security principles: Apply defense in depth and assume you have been breached
- Mobile device management and Mobile Apllication Management can help increase security, simplify management and improve the end-user experience.
-
Secure in an integrated way: Devices, Apps, Files, Identities
-
Windows 10
-
Many applications have been enhanced with:
- Mobile Application Management through Intune
-
Conditional Access
- Data Leakage Protection (DLP) on iPad: Not being able to copy/paste corporate data from a corporate app to a non-corporate/peronal app (by example Twitter), while allowing it between corporate apps like Outlook (version with these capabilities coming in Q2) and Word.
- Policy in Windows 10 can be configured to warn about copying data from corporate app to non-corporate app, but still allow it and logging the event.
- Supports multiple identities while still enforcing security and not allowing to copy corporate data between them.
- For more info: https://technet.microsoft.com/en-us/library/dn818907.aspx
- Azure RemoteApp can be used to easily enable people to use apps
-
Outlook : Protect a file that you share by email by using the Rights Management sharing application
- Uses Azure AD RMS
- Access (attempts) can be tracked including showing times and geographic locations using Azure RMS Document Tracking Public Preview
-
For more info:
-
Azure AD/EMS Cloud App Discovery
-
Insights available regarding access
-
Microsoft Azure Stack
-
Nano Server
- Nano Server is a remotely administered server operating system optimized for hosting in private clouds and datacenters. It is similar to Windows Server in Server Core mode, but markedly smaller. Also, there is no local logon capability, nor does it support Terminal Services. It takes up far less disk space, sets up significantly faster, and requires far fewer restarts than Windows Server.
-
More info:
-
Containers
-
Multi-cloud and hybrid cloud will become increasingly important
-
-
Content (co-)creation and sharing using Office, Skype For Business, HoloLens, etc
-
Azure
Like this:
Like Loading...
Tags: "Microsoft Ignite", #MSIgnite, Active Directory, Azure, Azure Active Directory, Azure AD RMS, Azure Stack, Cloud, Conditional Access, Cortana, Delve, device guard, EMS, Enterprise Mobility Suite, HoloLens, hybrid cloud, Hyper-V, Ignite, Intune, MAM, Microsoft Azure Stack, Microsoft Edge, Microsoft Hello, Microsoft Intune, Microsoft Passport, Mobile Application Management, MS Ignite, multi cloud, Nano, Nano Server, nested virtualisation, nested virtualization, Office 365, Office Delve, Office Sway, OMS, Operations Management Suite, Power BI, Project Spartan, RemoteApp, RMS, SCCM, Secure boot, SharePoint Server 2016, Spartan, SQL Server 2016, Sway, System Center 2016, Technical Preview 2, universal app, Windows 10, Windows Server 2016, Windows Update, Windows Update For Business
My blog reached 50.000+ views. Thanks everybody, this really exceeded my expectation and motivates me even more to keep going. Special thanks go out to my fellow bloggers in my blogroll and to those who shared my posts on Twitter, Facebook and other social networks.
Even though my blog exists since January 2012, I really started to blog actively around August and ever since I’ve tried to keep posting on a regular basis. At the start of 2013 I even intended to blog every day. I was able to keep it up for a short while, but it was just too time consuming. Now I try to blog something at least once every 5 days. The blog post count is now at 170.
Personally I think Microsoft is on the right track. I’m really looking forward to all new Microsoft product (preview) releases including Windows 8.1, Windows Server 2012 R2 and System Center 2012 R2 and you can expect some blog posts about this in the near future.
Popular posts
From the stats, it turned out these are the blog posts that are being viewed most, if you’ve missed any of them you might want to take a look at them:
Stats
For those interested in the view stats, here they are:
Comments and suggestions
If you have suggestions about what I can do to improve, please let me know. Also if you’d like to see some things covered more or in more detail, just leave a comment.
Like this:
Like Loading...
Tags: Apple, blog, blog post, blogpost, Microsoft, milestone, Mountain Lion, Office 365, OS X, POST, Server 2012, Sharepoint online, views, Windows 8, Windows Server 2012, wordpress
Even though the website http://office.microsoft.com provides a comparison of the different Office 365 plans, it is not always entirely clear which features are available or what the restrictions are.
Luckily, Jasper Osgaard created a great blog post comparing the different plans in more detail without having to go through tons of documentation:
http://blogs.technet.com/b/lystavlen/archive/2013/03/30/office-365-comparing-p-m-and-e-plans.aspx
Like this:
Like Loading...
Tags: comparison, ICT, Microsoft, Office 365, Office 365 comparison, Office 365 Plan, Office 365 plan comparison, Office 365 plans, Office365
About 3 weeks before the upgrade took place, I received e-mails informing me about the upcoming update. It included the plan date and also mentioned I could postpone the update. As the date of the upgrade approached I also received mails with information of new features and what had to be done.
The upgrade itself took place on the date that was communicated to me and when it was done I got a mail informing me that the upgrade had been completed. When I logged on to the Office 365 admin center (https://portal.microsoftonline.com/) I immediately found this to be a big improvement. It also showed me some alerts containing links to information about changes and tasks that still needed to be performed like upgrading SharePoint sites.
I didn’t expect any big issues, but I was a bit worried if my SharePoint customizations would keep working correctly:
It is possible to leave the SharePoint site the way it is (at least with this upgrade), but you can also upgrade it and take advantage of the new options. If you are considering upgrading the SharePoint site, you can perform a health check and you can also request an upgrade evaluation copy of the site collection before you actually upgrade.
Probably because of my customizations, the Site Collection Health Check found some problems related to Customized Files that could result in unexpected visuals or behavior.
For now, everything seems to be working fine though on my upgrade evaluation copy of the site collection, so I’ll probably upgrade my site collection soon. If you want to, you can take a look at both the pre-upgrade SharePoint site and the post-upgrade SharePoint site. The evaluation post-upgrade version will only be available until the 23rd of June.
What I did notice, is that the interface of the services have improved and have also been changed to better suit for touch devices. By example the white space between navigation items seems to have increased and everything is a bit bigger.
After the upgrade, I also had to restart some Office 2013 apps once.
Of course the upgrade to Wave 15 provides many more advantages, but in this post I only wanted to share my service upgrade experience without really changing anything. All in all, I think the upgrade experience went very well.
Like this:
Like Loading...
Tags: Exchange, Exchange online, experience, Lync, Lync online, Office, Office 365, service, service upgrade, service upgrade experience, Sharepoint, Sharepoint online, upgrade, wave 15, wave 2013
In yesterday’s blog post I mentioned that I was looking forward to being upgraded to the new Office 365 in the next 4 weeks.
I did encounter an issue however that I was not able to open files on SharePoint using the desktop version of Office 2013. I kept on getting the message: “call us overprotective, but we need to verify your account before opening this document”. This never succeeded and I couldn’t modify my file using Office 2013. The Office Web App version was working fine though.
After googling around a bit, I found out that this was a common issue for people that are planned to be migrated (pre-upgrade). The solution/workaround for this issue is described here:
Office 365 pre-upgrade users cannot open or synchronize SharePoint files after the Office 2013: March 12, 2013 update is installed
Like this:
Like Loading...
Tags: call us overprotective but we need to verify your account before opening this document, Cloud, Excel, Microsoft, Office, Office 2013, Office 365, OneNote, Powerpoint, Public Cloud, Sharepoint, Sharepoint online, upgrade, Visio, Word
Back in February I posted that as part of the new Office 365 service, changes would be made to the Office 365 plans.
These changes are in effect right now. In short this means that the E1 and K1 plans that previously were only able to read with the Web Apps have gotten the full Office Web Apps (view, edit, create). This replaces the old E2 and K2. So basically:
- Old E1/K1 have gotten E2/K2 functionality at the same low cost.
- Old E2/K2 customers will keep the same features, but at a lower cost (E1/K1).
- Old E2/K2 will be replaced by E1/K1 since they will then have the same functionality.
The new situation has become like this:
New Office 365 Enterprise Plans overview
PS: I love the Office 365 service and I’m looking forward to the new Office 365 features that will be added when Office 365 will start using the Office 2013 (Wave 15) versions of SharePoint, Outlook, Lync, Office Web Apps. I’ve gotten a mail that I’m planned to be upgraded within the next 4 weeks, so more about that soon. I’m especially curious if my SharePoint customizations will continue to work.
Like this:
Like Loading...
Tags: Cloud, cloud computing, E1, E2, enterprise plan, K1, K2, Lync, Office, Office 2013, Office 365, Office Web Apps, Outlook, owa, Public Cloud, Sharepoint, SKU
Nowadays more and more work, communication and collaboration involves multiple external parties. This can involve by example employees, customers, partners, suppliers, cloud providers/platforms/applications.
This means it is becoming increasingly important to have proper authentication and authorization methods in place for single sign on (SSO) so users can be more productive. Besides the ease-of-use It can also lead to better security.
Microsoft’s Active Directory Federation Services (ADFS) will make this possible. For more information on ADFS, here are some resources. Keep in mind though that while some information may be outdated, it will give you a broad idea of the concept and the inner workings. The current version of ADFS in Windows Server 2012 is 2.1 , while Windows Server 2008 uses 2.0
PS: Microsoft is moving more and more towards claims based authentication. Examples include Windows Server 2012 Dynamic Access Control and also SharePoint 2013 that has switched to claims based authentication by default now.
If you have some other resources that might be useful, please let me know so I can add them as well.
Like this:
Like Loading...
Tags: Access control, Active Directory, Active Directory Federation Services, ADFS, ADFS 2.0, ADFS 2.1, authentication, authorization, Azure, Cloud, configure, configuring, Deploy, deploying, Dynamic Access Control, federated identity, ForeFront UAG, IAAS, ICT, jump start, Microsoft, Microsoft Intune, Office 365, PKI, plan, security, Sharepoint, Sharepoint online, singe-sign-on, Single Sign On, SSO, Technet, Threat Management Gateway, TMG, UAG, Universal Access Gateway, virtual lab, Windows Azure, Windows Server 2008, Windows Server 2012
In the past I’ve created a post to get my public site to become a SharePoint 2010 style team site. The only thing I’d been missing since was a way to allow public/anonymous users to use the search (when trying to perform a search you would have to logon).This also meant that filters in the lists I created weren’t working 😦
Because of the unsupported customizing I did on the SharePoint site, I thought this just wasn’t possible.
Thankfully however, a visitor of my blog (Denis) came across my post “Provide anonymous access to sharepoint lists on Office 365 (Sharepoint online)” and shared this blog post to enable search for an Office 365 / SharePoint Online public site which refers to https://dotnetmafia.sys-con.com/node/1918049/mobile
So now my website http://www.bjornhouben.com and all the content inside it, including the lists is completely searchable.
Thanks again Denis.
Like this:
Like Loading...
Tags: design, layout, Microsoft, Office 365, Sharepoint, Sharepoint online, sharepoint public, Sharepoint public site, site
blog.bjornhouben.com 