Microsoft TechCommunity Top Posts Week 4, January 2022

Here’s my selection of TechCommunity posts for this week. My plan was to pick 5ish, but there’s a heck of a lot of content to go through, read, then decide if it’s worthy:

Mainframe Data Modernization to Azure

If you like visuals, you’ll like this post. The exponentially increased amount of data we have to work with becomes more difficult to manage on-premises, and this article covers some of the considerations around this and methods to move your data to the cloud. Nice for some future planning considerations.

Windows Server End of Support: Key Dates

Don’t forget those end of support dates! Windows Server 2022 is out, 2008 + R2 is on extended security updates, and 2012 + R2 has a bit under 2 years left before standard support ends (unless of course it gets extended). If you have 2008 or 2012 servers in your environment, just remember how old those are already. Upgrade sooner rather than later, instead of getting caught out by a project where something needs your domain forest level at 2019, and all your DC’s aren’t even on that version of Windows Server…

Users get intermittent credential prompt on client browser when using IIS Windows Authentication

January 2022 wasn’t a good month for Microsoft patches, one of many problems was this “After installing this update on domain controllers (DCs), affected versions of Windows Servers might restart unexpectedly.” Nice. Spend some time understanding the state of patches right now and make sure you’re not experiencing any of the several issues we’ve seen, including this.

Achieve better patch compliance with Update Connectivity data

A nice report in Intune shows the ‘Update connectivity’ stats of devices – the idea behind this is to see if devices aren’t online long enough to get updates. This data doesn’t really give you solutions to the problem, but does give you an idea on the risk in your environment if devices aren’t getting patched regularly, and how many devices have this as an issue. Everyone loves a donut graph, especially Microsoft.

Microsoft Teams users can now chat with any Teams user outside their organization

Pretty big news for work based Teams talking to external people via their Microsoft personal (consumer) account, or phone number. Note that this doesn’t create a SMS conversation, it requires a Microsoft account and will invite someone to sign up if they don’t already have one. This can be a good way for staff to talk to external people live, but still in a regulated/logged way, and the same way they’d talk to internal staff. External people also don’t need to install software (back in the day everyone wanted Skype installed to talk to that 1 external person) which is another plus. Lots of details on this post showing how it works and how to make sure it’s enabled in your tenant.

Sending From Email Aliases – Public Preview

I like this one. You can turn on the setting ‘SendFromAliasEnabled‘ in your tenant which lets users pick from a list aliases to send from – across Outlook for the Web and Outlook for iOS and Android. There are known issues so be very careful about enabling this in your tenant, but for people who need to send from different aliases for different reasons, this looks like a very useful new feature in Exchange Online.

Announcing general availability of vulnerability management support for Android and iOS

That other device that every employee has is often deemed as too hard to do much about, so it’s good to see something actually happening in the iOS and Android space for Defender – although there’s not too much it can do yet (especially for iOS). Still, this is worth looking into and is probably one of those things that if something bad did happen, you’d be happy you proactively rolled it out.

Onboarding Devices in the Microsoft 365 Apps Admin Center

Lots of content in this one. I don’t see too much content around the Microsoft 365 Apps Admin Center (and maybe that’s because when I see the name, my brain drops out the word ‘Apps’ and I’m thinking of the wrong portal). It’s https://config.office.com/ and the feature list here is continually growing. Looking through the reports will give you a better insight into what’s happening in your environment, and probably raise some questions :)

That’s it for this week, as always you can see the entire feed of TechCommunity posts at https://twitter.com/MSITTechNews and you can see my previous TechCommunnity picks here https://www.adamfowlerit.com/tag/techcommunity/

Microsoft TechCommunity Top Posts Week 3, January 2022

Another week, a bunch more TechCommuntiy posts. Here’s my picks of interesting ones:

Task management tips for Planner beginners

Getting started blog posts are always valuable. I particularly like the first image, showing an overall diagram of what makes up the Planner view. To me it’s (almost) all fundamental stuff I worked out, but it’d be quicker to read this then start using it than fumble my way through :) One thing I hadn’t done before was creating a Task from a Teams message which is a nice workflow option.

Microsoft Defender for Office 365 Ninja Training: January 2022 Update

There is so much good content in the Defender Ninja Training (Office 365, Sentinel etc, all of the different parts!) and once you’re caught up, you can keep up to date monthly with these posts that show what’s changed or new. Now all we need is more time to watch all the content!

Why you shouldn’t set these 25 Windows policies

There’s still someone that cares about Windows Updates, and even WSUS aligning with Group Policy settings in Microsoft, and it’s Aria Carley. Clean up some unused settings if you’re on Windows 10/11, and understand the real world impact of other settings acting maybe not the way you’d expect, with recommendations and links to official doco. I also don’t know what GP and CSP recommendations are as per the comments (GP = Group Policy officially, CSP = Customer Services Provider team inside Microsoft? I always get these wrong), but I’m sure that’ll be explained soon.

“Architecting Adelaide” 🎙 – The Intrazone podcast

The guys didn’t tell me about this one! My old user group in Adelaide that I had to hand over in 2021 is now being run by these awesome guys:

and they were on the Intrazone podcast talking about their IT Pro experiences. Well done you three :)

Getting started with Azure Bicep

As someone who doesn’t deep dive into Azure, I was wondering what Azure Bicep even is. Sonia Cuff explains this and demonstrates how it’s a simpler language evolved from JSON, and that the language can be translated back and forth betwen the two – but the result is templates that are easier to write, especially for those who aren’t developers.

Windows 10 or Windows 11 GPO ADMX – Which One To Use For Your Central Store?

If you’re starting with Windows 11 and have Group Policy still running, you need to read this. It’s not a great state to be while transitioning with all the catches and gotchas. Why they didn’t just have a separate set of policies for Windows 11 and have on the comments on each GPO what versions of Windows it applies to is unclear. There’s a few angry comments already on this. My personal take is that there’s no real benefit of jumping to Windows 11 yet for the enterprise (home it’s fine), so sit tight and wait for some of these things to settle, or at least be clearer as others work them out.

Security baseline for Microsoft Edge v97

There’s 1 new recommendation and 15 new settings (for computers and users) in the latest version of Microsoft Edge. These come out with each version of Edge, so you need to keep up to date and review any recommendations each time. Weirdly, the setting they recommend to turn off “Enhance images enabled” isn’t visible on Edge v97 installed on my home PC or work PC logged in with different profiles, but it should still be disabled in Group Policy so you’re not uploading internal company images to Microsoft to ‘enhance’ them. I question that if the recommendation for Enterprise is to turn it off, why is it safe enough for consumers to use, who I’m sure would have photos at times opened in their browser they don’t want invisbily uploaded? Maybe there’s something else to the recommendation I’m missing, like keeping your data in the country you want where the service could put it anywhere…

Securing Critical Infrastructure with Microsoft Sentinel & Microsoft Defender for IoT

The real answer to this is ‘IoT shouldn’t be on the same network as anything you care about, especially in Enterprise – or just don’t use IoT in Enterprise at all’ is a pipe dream, at least you can monitor what your IoT devices are doing in Sentinel. Looks pretty easy to connect up, but of course just having Sentinel ingest logs isn’t really a 24/7 SOC solution, you need people on top of this.

That’s it for this week, as always you can see the entire feed of TechCommunity posts at https://twitter.com/MSITTechNews and you can see my previous TechCommunnity picks here https://www.adamfowlerit.com/tag/techcommunity/

Microsoft Teams PowerShell Phone Number Assigning Cmdlet Change

Note: Right now, the below doesn’t work in my testing for Calling Plan in Telstra, Australia. You may have success, but be aware that I didn’t when trying to use the new command:

BadRequest User ‘xyz’ lacks appropriate licenses to assign a ‘CallingPlan’ number

I’ll update/remove this once resolved.

Original article:

Microsoft has sent out an announcement on PowerShell changes for setting and removing phone numbers in Microsoft Teams:

Changes coming to phone number assignment using Teams PowerShell Module cmdlets
MC316139 · Published 19 Jan 2022

In summary, these commands are being deprecated “The retirement is planned to begin in early April and be complete by mid-April.” :

Set-CsOnlineVoiceUser
Set-CsOnlineApplicationInstance
Set-CsOnlineVoiceApplicationInstance

and Set-CSUser can’t be used to allocate phone numbers either. I’d been allocating numbers with the Set-CsOnlineVoiceUser command. The replacement for this is:

Set-CsPhoneNumberAssignment and Remove-CsPhoneNumberAssignment

They run under the MicrosoftTeams module for PowerShell, but you also need to make sure you have the latest version. If you don’t have a version that supports this new command, you’ll get the error:

Set-CsPhoneNumberAssignment : The term 'Set-CsPhoneNumberAssignment' is not recognized as the name of a cmdlet,
function, script file, or operable program. Check the spelling of the name, or if a path was included, verify that the
path is correct and try again.
At line:1 char:1

To update, run the command:

Update-module MicrosoftTeams 

Then try the above cmdlet again. If you’re feeling really brave, you can update all your modules with:

Update-module *

Disconnect or restart PowerShell or you’ll get problems running the new cmdlet if you had it connected while updating.

The new cmdlet Set-CsPhoneNumberAssignment doesn’t work exactly the same way as the old cmdlets. Read the documentation for more details

Set-CsPhoneNumberAssignment -Identity adamfowler@contoso.com -PhoneNumber +61987654321 -PhoneNumberType CallingPlan

The options for -PhoneNumberType (required) are DirectRouting, CallingPlan and OperatorConnect.

I’d suggest testing and migrating soon, before you miss the April deadline of the command being dropped.

Screenshot on Windows 11

Screen Shot on Windows 11

How to take a screenshot without any extra software

  • Pressing Windows key + Shift + S will bring up the Snip & Sketch App
  • Pick from the 4 choices – Rectangular Snip, Freeform Snip, Windows Snip, or Fullscreen Snip
  • Click on what you want to screen shot
  • Use the Notification Area in Windows 11 to view, edit and save your screen shot.

Although you can still use the Print Screen button to take a screenshot of everything you can see across all monitors, or Alt + Print Screen to take a screenshot, this will purely add that image to the clipboard. You’ll then need to paste it somewhere to have a copy of it to work with and save.

Snipping tool provides a few more handy functions compared to Print Screen, and you don’t have to open the program to use it, you can just use the key combo Windows logo key + Shift + S all at the same time.

Once you’ve taken a screenshot, it will immediately be available on the clipboard too, so you’re able to paste it straight into a document, email or anywhere else that will accept clipboard images.

You can also just launch Snipping tool to use the ‘New’ button, after selecting what sort of screen shot you want – Rectangle mode, WIndow mode, Full-screen mode or Free-form mode.

Also, if you’re wondering – is it ‘Screen Shot’ or ‘Screenshot’ – both are acceptable according to dictionary.com.

Network and Sharing Center – Windows 11

Network and Sharing Center

How do you find the Network and Sharing Center in Windows 11?

  1. Press the ‘Start’ button
  2. Type ‘Control Panel’ and click the shortcut to Control Panel
  3. Click ‘Network and Internet’ (skip this step if your ‘view by’ isn’t set to ‘category’)
  4. Click ‘Network and Sharing Center’

Applies To: Windows 11


The Network and Sharing Center can be a bit hard to find in Windows 11, and there’s several ways to find it. The quickest way is by following the instructions above.

The Network and Sharing Center is part of the classic Windows Control panel, and being replaced by the more modern Network & internet area of Settings: