Net/PC How to

To export all members’ email addresses of an Office 365 group, you may have Mutiple ways to do so.

Resolution 1: Get-MsolGroupMember Microsoft Exchange Online Pweroshell command. Note:

1. Open Microsoft Exchange Online Pweroshell Run as administrator.
2. Type Connect-MsolService and press Enter. Enter your credentials.

3. If you would like to know the group name and IP, use Get-MsolGroup -all

4. You can use one of these commands to export the group members.

in this example, the group name is all employees

Get-MsolGroupMember -GroupObjectId | Where-Object { $_.DisplayName -like “all employees” }

in this example,grou ID is 7b89b6fb-87e5-4ddc-8a87-17b741eb9f67

Get-MsolGroupMember -groupObjectid ‘7b89b6fb-87e5-4ddc-8a87-17b741eb9f67’ | Select DisplayName,EmailAddress,GroupMemberType | Export-csv C:\group-members.csv

Resolution 2: Use Get-UnifiedGroup command.

Get-UnifiedGroup -Identity "GroupName" | Get-UnifiedGroupLinks -LinkType Members | Select-Object name, PrimarySmtpAddress | Export-CSV -Path "C:\Temp\GroupMembers.csv" -NoTypeInformation

Here’s what each part of the command does:

• Get-UnifiedGroup -Identity "GroupName" retrieves the Office 365 group by its name or email address.
• Get-UnifiedGroupLinks -LinkType Members retrieves the members of the group.
• Select-Object name, PrimarySmtpAddress selects the display name and primary SMTP address of each member.
• Export-CSV -Path "C:\Temp\GroupMembers.csv" -NoTypeInformation exports the results to a CSV file at the specified path.

Replace “GroupName” with the name or email address of the Office 365 group that you want to export the members from. Also, make sure to update the file path in the Export-CSV cmdlet to specify the location where you want to save the CSV file.

In old office 365 version, use export feature.

1. Sign in to your Office 365 account and navigate to the Office 365 group whose members you want to export.
2. Click on the group name to open it.
3. In the group navigation bar, click on “Members”.
4. Click on the gear icon in the top right corner and select “Export members”.
5. A CSV file containing the members’ email addresses will be downloaded to your computer.

Alternatively, you can use PowerShell to export the members’ email addresses. Here are the steps to follow:

1. Open PowerShell on your computer.
2. Connect to your Office 365 account by running the following command: Connect-EXOPSSession -UserPrincipalName <your_username> Replace <your_username> with your Office 365 username.
3. Run the following command to export the members’ email addresses to a CSV file: Get-UnifiedGroup <group_name> | Get-UnifiedGroupLinks -LinkType Members | Select Name,PrimarySmtpAddress | Export-Csv -Path <file_path> Replace <group_name> with the name of your Office 365 group and <file_path> with the path where you want to save the CSV file.

To create an Office 365 all employees group, follow these steps:

1. Go to the Office 365 Admin Center and sign in with your admin credentials.
2. Click on the “Groups” option in the left-hand menu.
3. Click on the “Add a group” button in the upper-right corner.
4. In the “Group type” section, select “Distribution”.
5. In the “Group name” field, enter a name for the group (e.g., “All Employees”).
6. In the “Alias” field, enter an email address for the group (e.g., “allemployees@yourdomain.com“).
7. In the “Description” field, enter a brief description of the group (optional).
8. Click on the “Create” button.
9. Once the group is created, you can add all employees to the group by going to the “Members” tab and selecting “Add members”. You can select all employees at once by choosing the option “Select all” or by searching for the employees you want to add.
10. Click “Save” to add the members to the group.

Now, all employees in your organization will receive emails sent to the group email address.

To create an Office 365 all employees group, follow these steps:

1. Go to the Office 365 Admin Center and sign in with your admin credentials.
2. Click on the “Groups” option in the left-hand menu.
3. Click on the “Add a group” button in the upper-right corner.
4. In the “Group type” section, select “Distribution”.
5. In the “Group name” field, enter a name for the group (e.g., “All Employees”).
6. In the “Alias” field, enter an email address for the group (e.g., “allemployees@yourdomain.com“).
7. In the “Description” field, enter a brief description of the group (optional).
8. Click on the “Create” button.
9. Once the group is created, you can add all employees to the group by going to the “Members” tab and selecting “Add members”. You can select all employees at once by choosing the option “Select all” or by searching for the employees you want to add.
10. Click “Save” to add the members to the group.

Now, all employees in your organization will receive emails sent to the group email address.

To add a member to SharePoint, you can follow these steps:

1. Navigate to your SharePoint site and click on the gear icon in the top right corner of the page.
2. Click on Site Permissions from the drop-down menu.

3. Click Add members under Permissions.

4. You have two options: Add members to group and Share site only

5. If you click on Add members to group, you will see all members. Click Add members again.

6. Enter the username and click on Save.

If you click on

In 3, if you click on Share site, enter the personal email address. Then click on Add.

Note: if you are global administrator and not site owner, you will need to assign yourself site owner to add the member.

In Microsoft 365, the self-service password reset feature is available with Azure Active Directory Premium P1 or P2 licenses. These licenses allow users to reset their passwords by using the Microsoft 365 login screen or the Azure AD self-service portal.

With one-way sync, you can still enable self-service password reset for your synchronized users, but you’ll need to configure password writeback feature. Password writeback allows changes made in Azure AD to be written back to your on-premises Active Directory, including password resets.

To use password writeback, you’ll need to have an Azure AD Connect server that is configured with a service account that has permissions to write passwords to your on-premises Active Directory. You’ll also need to enable password writeback in the Azure AD portal.

Once you have password writeback enabled, your synchronized users can use the self-service password reset feature in Microsoft 365, and their new password will be written back to your on-premises Active Directory.

Please note that self-service password reset feature also requires Azure AD Premium P1 or P2 licenses, so you’ll need to ensure that your users have the appropriate licenses assigned to them.

If you’re using Office 365 E3, you can reset your password using the self-service password reset (SSPR) feature. Here’s how to do it:

1. Go to the Microsoft 365 sign-in page and click the “Can’t access your account?” link.
2. Select the “Work or school account” option and enter your Office 365 E3 email address.
3. Complete the security verification process by either entering a verification code sent to your mobile phone or email address, or by answering security questions.
4. Once you’ve completed the security verification process, you’ll be prompted to enter a new password.
5. Enter your new password twice to confirm it, and then click the “Finish” button.
6. Your Office 365 E3 password has now been reset.

If you have any issues with the SSPR process, you should contact your IT administrator for assistance.

Note: you must have two-way sync to do it.

Self-service password reset (SSPR) is a feature available in various Microsoft 365 plans that allows users to reset their own passwords without having to contact their IT administrator. Here are the Microsoft 365 plans that include SSPR:

1. Microsoft 365 Business Basic: This plan includes basic email hosting and web-based Office applications, as well as SSPR.
2. Microsoft 365 Business Standard: This plan includes the same features as the Business Basic plan, as well as desktop versions of Office applications and Microsoft Teams. It also includes SSPR.
3. Office 365 E3: This plan includes advanced email hosting, Office applications, and collaboration tools like Microsoft Teams. It also includes advanced security features and SSPR.
4. Microsoft 365 E3: This plan includes the same features as Office 365 E3, as well as additional security and compliance features. It also includes SSPR.
5. Microsoft 365 E5: This plan includes all the features of Microsoft 365 E3, as well as additional security and compliance features, advanced analytics tools, and more. It also includes SSPR.

Note that SSPR may not be enabled by default in all Microsoft 365 plans. IT administrators will need to configure SSPR settings in the Microsoft 365 admin center to make the feature available to users.

Note: you must have two-way sync to do it.

Azure Premium P1 is a subscription plan offered by Microsoft Azure, which is a cloud computing service provider. It is a higher-tier plan compared to the standard Azure Active Directory (Azure AD) Free and Basic plans.

Azure Premium P1 provides additional features and capabilities for managing identities and access to cloud resources. Some of the key features of this plan include:

1. Self-service password reset: Users can reset their own passwords without requiring help from IT administrators.
2. Multi-Factor Authentication (MFA): This feature adds an extra layer of security to the authentication process by requiring users to provide additional verification, such as a fingerprint or a code sent to a mobile device.
3. Conditional Access: This feature allows organizations to set policies that control access to resources based on various conditions, such as the user’s location, device, or risk level.
4. Dynamic Groups: This feature allows administrators to create groups based on dynamic criteria, such as job title, department, or location.

Azure Premium P1 also includes access to advanced reporting and monitoring capabilities for better visibility into user and device activities. It is designed to provide organizations with a more comprehensive and secure solution for managing identities and access in the cloud.

If you are looking to modify the synchronization interval of Microsoft Azure DirSync, you can follow these steps:

We can try the following steps to adjust the time interval (It is 3 hours by default):
1.  Navigate to the Windows Azure Active Directory Sync directory (C:\Program Files\Windows Azure Active Directory Sync) on the server where the Directory Sync tool is installed.
2.  In this folder open up the file 
Microsoft.Online.DirSync.Scheduler.exe.config file.
3.  Adjust the setting “SyncTimeInterval” value=”3:0:0″ />
4.  Close and Save the file and then restart the 

Or

1. Log in to your Azure AD Connect server using an account with administrative privileges.
2. Open the “Azure AD Connect” application from the Start menu.
3. Click on the “Configure” option to launch the Azure AD Connect wizard.

4. On the “Configure” page, click on the “Customize synchronization options” link and then Next

5. Enter your password.

6. Continue to Configuration page.

7. On the “Synchronization frequency” page, select the “customize” option.

In the “Synchronization schedule” section, you can modify the synchronization interval according to your requirement.

You can choose to run a full synchronization or a delta synchronization, and you can also set the synchronization interval in minutes or hours.

Once you have made the necessary changes, click on the “Next” button to complete the configuration.

Note: Keep in mind that changing the synchronization interval can impact the performance of your Azure AD Connect server and the synchronization process. Therefore, it is recommended to carefully consider the impact of any changes before making them.

Situation: The client would like to add an AD user to manage their Palo Alto Firewall. This article shows how to add the AD user for login the Firewall.

1. After login the PA firewall, go to DEVICE>Authentication Profile. Add the user to the Authentication Profile.

2. Go to DEVICE>Administrators. Add the user to the authentication profile accordingly.