charbelnemnom/power-mvp-elite

PowerShell Tools and Scripts

power-mvp-elite's Issues

No issue just a question...

Really nice work on your script, but I was wondering if you were aware of anything similar that doesn't require JIT on the VM. For someone who just wants JIT functionality, having to upgrade to Standard Security Center Tier at a cost of $15/month is way too high.

I'm looking for a powershell script that can directly add an NSG rule. Obviously this can be done with powershell but I'm referring to some method where the user wouldn't have access to the entire Azure account and somehow be restricted to only using the script, and where the script can only add/remove an NSG rule. Forcing the user to enter their public IP address would be a good feature too.

Non required fields causing failed import

When importing from CSV if the user is missing any "Non Required fields" it throws back a bad request and doesn't import the user.

Here's part of the error:
Message: Invalid value specified for for property 'telephoneNumber' of resource 'user'

What is the best way to import users if they have empty spaces in certain CSV columns? The required fields check is good because it skips to the next record, but for non-required such as telephone we would like it to still import the user and just skip that specific field. Any suggestion??

Thanks!

Change notifications.

Hello. How I can change this notifications: Windows Server is consuming more than 50.000000 % of physical memory, which exceeds your configured threshold.
How Set 90% on this notification ?

Multi-Factor authentication issue

Hello,

Actually it give you an error like: " Cannot connect to Azure AD. Please check your credentials. Exiting!" if you are launching the script with an account with MFA enabled.

Edit: I workedarround this by setting the credential parameter to Mandatory=$false & adding the MFA option:

    [Parameter(Position=1, Mandatory=$false, HelpMessage='Specify Credentials')]
    [Alias('Cred')]
    [PSCredential]$Credential,
# Use MFA login
    [Switch]$MFA

if ( $MFA ) {
    Connect-AzureAD -ErrorAction Stop | Out-Null
	} Else{
		Connect-AzureAD -Credential $Credential -ErrorAction Stop | Out-Null
		}

Please make sure that the access request is within the allowed policy properties.

Hi,
been trying to get the script to work. I created the rbac role, assigned a user at the subscription level. Then I went into security centre and tried to request access. I get the following error

The given access request is not a subset of policy '/subscriptions//resourceGroups//providers/Microsoft.Security/locations/australiaeast/jitNetworkAccessPolicies/default'. Please make sure that the access request is within the allowed policy properties.

Does the rbac role work for you through the azure portal ?

Invoke-AzureADBulkUserCreation

Expand Get-SCVMVirtualDisk to add CPU/Memory data.

Hey - I was wondering if you could expand the report to show CPU/Memory as well as disk size.
Maybe also include option to export report as a csv as it will making sorting the data easier. (filter by host etc)
The other option would be to allow report to show certain custom fields but I'm sure I can work on that bit (custom field = customer, sort vm's by customer to show their impact and forward to billing etc)

AzureRM is replaced by Az

Did you by any chance have time to make an Az version as well? :)

Monitoring S2D Screenshots

Multiple Hyper-V Rep Servers

We have around 12 Hyper-V Rep servers, each are standalone, we do not domain join them. How can i specify credentials for this so I can get the script to automatically monitor all of them?

I am currently getting WinRM authentication errors.