Commands PowerShell

Question 1

Get-MsolRole

Answer 1

Will display all possible that are available.

Question 2

Get-MsolRoleMember

Answer 2

display what members are part of a specific role.

Question 3

Add-MsolRoleMember

Answer 3

Add users to a roll

Question 4

Remove-MsolRoleMember

Answer 4

Removes user from a roll

Question 5

Get-MsolUser

Answer 5

○ Will show you a max of 500 users anymore you would have to run “-all” command

Question 6

Export-Csv

Answer 6

○ Can provide a list of all user and then export to a Csv file

Question 7

Set-MSolUserPassword

Answer 7

○ Make any major password updates, eg if you have had a breach and want everybody to change their password can do so by using this command.
○ Can set multiple user passwordds at once

Question 8

Import-Csv

Answer 8

Import modification into O365

Question 9

Get-MSOLUser -UserPrincipalName | Select PasswordNeverExpires

Answer 9

This checks to see whether password never expires is enable.
This is for an individual user

Question 10

Get-MSOLUser |UserPrincipalName, PasswordNeverExpires

Answer 10

This checks to see whether password never expires is enable.
This is for everyone.

Question 11

Set-MsolUser -UserPrincipalName -PasswordNeverExpires $true

Answer 11

Sets Password to never expire. Pay attention to the”true or false” at the end.
False removes
True adds
§ Helpful for system account normal users should not really have this enabled
§ Individual account

Question 12

Get-MSOLUser | Set MsolUser -PasswordNeverExpires $false

Answer 12

Sets Password to never expire. Pay attention to the”true or false” at the end.
This is for everyone

Question 13

Get- MsolUser | Set-Msoluser - StrongPasswordRequired $false

Answer 13

○ This is command saying that it is isn’t requiring a strong password.

Question 14

Set-MsolPasswordPolicy -ValidityPeriod 730 -NotificationDays 30

Answer 14

○ Used to configure the password expiration policy. The validity period can be a number between 14 and 730 and specifies the number of days the password remains valid.
○ NotificationDays argument speciedies the grace period between the time the user is first notified that the password must be changed and the password expiration date. The vaild range for this argument is 1 to 30 days.

Question 15

Get MsolAccountSku

Answer 15

This will present a list of license types and the exact wording you will need to apply licenses to users

Question 16

§ Set-MsolUserLicense -UserPrincipalName -AddLicenses

Answer 16

Add licenses to bulk imported users

Question 17

§ Get-MSolUser -UnLicensedUsersOnly | Set-MsolUserLicense-AddLicenses

Answer 17

Add licenses to bulk imported users

Question 18

Get-MsolUser -ReturnDeletedusers

Answer 18

Returns all soft deleted users.

Question 19

Get-MsolUser -ReturnDeletedUsers | Remove-MsolUser -RemoveFromRecycleBin -Force

Answer 19

Hard deletes a user.

Question 20

Add-AadrmRoleBasedAdministrator

Answer 20

cmdlet cam be used to assign either global administration permission over Azure Rights Management (RMS) or permission to install and RMS connector. A user or group granted global admin permission can run any Azure RMS cmdlet and configure RMS through Azure management protal or office 365 admin.

Question 21

Add-AadrmSuperUser

Answer 21

cmdlet is used to assign super user permission to a user. A super user can decrypt protected files and remove RMS protection. You must enable the super user feature before you can add a super user account. Can be enable with the following cmdlet Enable-AadrmSuperUserFeature.

Question 22

Enable-AadrmSuperUserFeature.

Answer 22

Enables SuperUserFeature which need to be done before you add a super user account.