Skip to main content

Deploying Microsoft Entra Self-Service Password Reset (SSPR) in a Hybrid Environment with PowerShell

· 4 min read

One of the first things organizations do once they upgrade to a M365 license type that includes Microsoft Entra ID P1 is to start rolling out Conditional Access Polices to incorporate fine-grained security polices. However, after that, an attractive feature, especially for organizations with a hybrid environment, is the Self-Service Password Reset (SSPR) feature.

Entra ID Emergency Access Account

· 8 min read

To avoid losing administrative access to the Entra portal from things such as a misconfiguration of a conditional access policy (CAP), it's important to setup an emergency access (break glass) account with the Global Administrator role assigned to it. In this guide, we'll walkthrough the process of creating an emergency access account, setting up phishing resistant authentication, and setup monitoring to receive alerts when the account is used.

Configure Azure PowerShell

· 2 min read

Using the Azure Portal to create and manage resources can be beneficial for one-off tasks and learning about different services offered in Azure; however, it becomes more practical to take advantage of a scripting language such as PowerShell for management of tasks as it allows the use of one-liner syntax, piping outputs, and scripting.

Configure Active Directory using PowerShell

· One min read
New-Item -Path "c:\" -Name "PowerLab" -ItemType "directory"
'P@$$w0rd12' | ConvertTo-SecureString -Force -AsPlainText | Export-Clixml -Path C:\PowerLab\SafeModeAdministratorPassword.xml

$safeModePw = Import-Clixml -Path C:\PowerLab\SafeModeAdministratorPassword.xml

Install-windowsfeature -Name AD-Domain-Services

$forestParams = @{
DomainName = 'techuplab.local'
DomainMode = 'WinThreshold'
ForestMode = 'WinThreshold'
Confirm = $false
SafeModeAdministratorPassword = $safeModePw
WarningAction = 'Ignore'
}

$null = Install-ADDSForest @forestParams