Microsoft Graph PowerShell examples for Application Management

Sat, 14 Dec 2024 09:13:00 +0000

Before writing another app credential report from scratch, check Microsoft’s Graph PowerShell application-management samples.

The collection includes reports for app registrations and enterprise apps, with versions focused on expiring secrets and certificates. Pick the right object type: app registrations are application objects, while enterprise apps are service principals in your tenant.

A useful starting point is the app-registration expiry report. It asks for an expiry window, whether to include already-expired credentials, and a CSV destination, then includes owner information so you know who to contact.

Defender Firewall FQDN filtering - prefer NRPT for broad blocks

Tue, 19 Nov 2024 22:18:00 +0000

For broad domain or TLD blocking, I recommend NRPT rules over Windows Firewall dynamic keyword blocks. Firewall FQDN rules turn matching DNS results into IP-based restrictions, which can affect unrelated names sharing the same address.

I hit this in June 2026: blocking *.cn picked up an Azure Front Door IP after a user visited docs.azure.cn. That IP also served Microsoft portals, so Azure, Entra, and Intune access broke.

Original close-up of the blocked connection showing that a dynamic keyword address matched. Historical June 2026 trace; the destination IP and private source address are diagnostic values, not stable configuration guidance.

PowerShell on Nathan McNulty

Microsoft Graph PowerShell examples for Application Management

Defender Firewall FQDN filtering - prefer NRPT for broad blocks