Aaand again…another CRAZY Office365 issue solved, with a resolution out of left field. In this case, the user was having problems when replying to emails; not only did the email get delivered as usual, and the usual sent item was created in Sents, but the original email in the INBOX was being converted to a DRAFT! So if I sent him an email, and he replied to me, I’d get the reply as usual, but my original email, in his inbox, was turning into a draft.
In addition, he complained that his calendar was out-of-sync; things on his phone weren’t showing up in Outlook.
Had a strange issue today, and looking into it, found even more strange issues, particular revolving around Teams finally providing the admin access to a user’s calling settings.
Again, I love to share things that seem to take a bunch of searching for, and in this case, trying to find a full list of commands when administering Exchange online/Office365 via Powershell. You won’t ever find a list really, because they’re changing all the time and may also be dependent on the type of tenant you have amongst other factors.
I like to post about the stuff that always seem to evade my google fu, or perhaps requires a LOT of searching and research to find that oddball answer in the 5th reply to a thread, so here’s one of those answers that will hopefully help someone down the road.
I figured I’d share this one, since it’s one of those fun Microsoft-isms that just like to pop up on a rainy Friday. I had a script that runs on a server, that I had to modify to grab some info off a web page using Invoke-Webrequest. Super simple basic request with no auth. Added it to the script, run the script on the server, works great, life is good!
Yet another dreaded hurdle trying to enable OneDrive “Backup” (previously labeled as KFM, or “Known Folder Move”). When trying to enable OneDrive backup, you get an error: “The Documents folder contains other important folders and isn’t supported for file protection.”
As I’m trying to clean up some accounts, I found that it’s -not easy- to simply get a list of all the groups a user is a member of in powershell, at least not like the one that displays in the admin portal. In doing some hunting (admittedly, not a lot of hunting) I came across this site that has just about what I was looking for, but I will warn you that the one-liners provided are not efficient – they have to populate the members of all groups, therefore if you have a LARGE directory, these may take a very long time to run, and be data-intensive. If you’re an SMB or SME with only a couple hundred users, they should be OK.
The problem was, it didn’t work! It looked good, but the variable it stored the results in was empty. After a quick review I realized the problem; the $mailbox.Alias at the end of the scripts should have been $mailbox.Name, since the alias will never match the name shown in the group membership. Once I changed that, it worked as it should:
$Office365GroupsMember = Get-UnifiedGroup | where { (Get-UnifiedGroupLinks $_.Alias -LinkType Members | foreach {$_.name}) -contains $mailbox.Name}
However…this only works for “Office365” Groups, and not all Office365 group types, that may include groups sync’ed from Active Directory/DirSync, like distribution lists and so on. I took the one-liner from that site, and modified it slightly to use “get-msolgroup” rather than get-unifiedgroup, which worked as it should.
From there you can pipe the output of that command into others, like remove-msolgroupmembership (although it needs the member objectid which is odd), or store it in a variable. Keep in mind you may want to filter group types as well, as I’m not sure you can remove a user from an Office365 group that was added/created as part of a Teams teams.
