Azure AD Device Cleanup

When dealing with Azure AD devices, usually we are facing the following challenges:

  • There is no report in Azure AD that shows the stale devices.
  • There is no retention policy to delete the stale devices from Azure AD.
  • There is no way to restore the deleted Azure AD device or its attributes (e.g Bit-Locker recovery key).

In this article, I am providing the following PowerShell script that gives comprehensive options to deal with the above challenges.
Continue reading

Test Device Registration Connectivity

The Hybrid device is being registered to Azure AD under the system context, the first step is to make sure that the device is able to communicate with Azure AD device registration endpoints under the system account. Here we need to use Test Device Registration Connectivity script.
Continue reading

Hybrid Azure AD Joined Devices Health Checker

Coming from the fact that it does not mean that the hybrid device is in health state just by checking the output of “dsregcmd /status” command from the device itself. Also, it does not mean that the hybrid device is in health state by checking only the device in Azure AD devices blade.
Continue reading

Device Registration SCP Tool

I have written this PowerShell script to automate resolving Device Registration Service Connection Point (SCP) creation and configuration issues while configuring Hybrid Azure Active Directory Joined devices. The script verifies all needed prerequisites to install SCP, installs the missing ones, then, it creates SCP. Also, this PowerShell fixes the common issues that may occur when creating SCP.
Continue reading

Event ID 12016, Certificate Error on Microsoft Exchange Transport

Event ID 12016: There is no valid SMTP Transport Layer Security (TLS) certificate for the FQDN of SERVERNAME.DOMAIN.LOCAL. The existing certificate for that FQDN has expired.
The continued use of that FQDN will cause mail flow problems. A new certificate that contains the FQDN of SERVERNAME.DOMAIN.LOCAL should be installed on this server as soon as possible.
You can create a new certificate by using the New-ExchangeCertificate task.
Continue reading