Welcome to the Jocha blog!

Get Active Directory pictures in Windows 10

We have been working on migrating a customer from Windows 7 over to Windows 10. Our goal is to have Windows 8 and 10 clients pull the pictures from Active Directory to the users local profiles.

Windows Backup Mail Report Script

Updated version available: This article covers v4.1 of the script (2016). A fully rewritten v5.0 is now available, compatible with Windows Server 2025 and using the SendGrid REST API instead of the deprecated Send-MailMessage.Read the updated article: Windows Server...

Breaking into a Windows System

Do you ever get that sinking feeling, when you’ve forgotten the root password to your test lab?  Again?

I hate it too!  So I decided to figure out a way around it, using a work around…

Change the Azure AD Sync Schedule

I finally I got some time to play with the new Azure Active Directory Sync tool and its configuration.

The installation was very straight forward. The step-by-step instruction are provided on MSDN. The administration tools and scripts are located in difference places compared to DirSync which was little confusing in the beginning.

Azure Backup Job Failed 0x1D4C2

Lately we’ve been getting a lot of inquiries regarding Azure Backup. One customer tried to set up the Microsoft Azure Recovery Services (MARS) agent, they experienced a problem where the backup job fails immediately…

Automate App Registration Secret Expiry Alerts

Automate App Registration Secret Expiry Alerts

Expired application secrets are one of the most common causes of silent production outages in Microsoft 365 environments. An app registration in Entra ID powers everything from automated workflows and API integrations to third-party SaaS connectors. When its client...

Automate Entra Guest User Lifecycle with PowerShell

Automate Entra Guest User Lifecycle with PowerShell

Learn how to automate the full Entra ID guest user lifecycle using PowerShell and the Microsoft Graph API. This guide covers discovery, stale account detection, notification emails, and safe two-phase removal to keep your Microsoft 365 tenant clean and compliant.

Automating MFA Audits in Entra ID with PowerShell

Automating MFA Audits in Entra ID with PowerShell

Learn how to audit MFA registration status across your entire Microsoft Entra ID tenant using PowerShell and the Microsoft Graph API. Includes filtering, CSV export, and a fully automated scheduled reporting script.

App-Only Auth for Microsoft Graph with PowerShell

App-Only Auth for Microsoft Graph with PowerShell

A step-by-step guide to creating an Entra ID app registration, generating a self-signed certificate, assigning Microsoft Graph API permissions, and connecting with PowerShell for fully unattended automation.

PowerShell MCP server with Claude Code

PowerShell MCP server with Claude Code

PowerShell can now act as an MCP server, giving AI agents like Claude direct access to your shell session. This post walks through installing and configuring PowerShell.MCP with Claude Code and covers practical IT automation scenarios.