How To Install AD FS 2016 For Office 365

This is a step by step guide to installing and configuring Windows Server 2016 Active Directory Federation Services (AD FS) for use with Office 365.  If you still wish to deploy the previous version of AD FS (Windows Server 2012 R2 AD FS), then please start with this post.  For those with a keen eye,…

1

Unable To Access OWA or Office 365 Portal On Servers

Being unable to open OWA or the Office 365 portal is a common issue in test labs.  In these environments there may be a desire to use the browser installed on a lab server to quickly access the Office 365 portal or to test email by using OWA. This is typically met with the below…

0

How To Enable AAD Connect Sync Cycle

When installing Azure Active Directory Connect (AAD Connect), it is sometimes required that the initial synchronisation is not initiated until additional configuration has been performed.  This may mean that rules have to be edited, or that certain filtering options are to be applied. AAD Connect will inform you that synchronisation will not occur until you…

1

Load Balancing WAP In Azure RM

In the previous post Load Balancing Azure AD FS Services  we looked at using Azure RM to deploy and load balance AD FS services.  This is the follow-up post to deploy the Web Application Proxy (WAP) servers and its associated load balancer into the DMZ. In this post we will focus upon the highlighted area…

0

Testing AD FS Signon Page – An Error Occurred

There are many causes for receiving errors when signing onto AD FS.  However some are more genuine than others.  This is a quick tip to check that you are on the right track before diving into the details and potentially spending time troubleshooting when in fact nothing is wrong.  Just lately, for some reason I’m…

3

Reminder – Upcoming Change in Office 365 EOP Connectors

There is an upcoming planned change in Office 365 to restrict relaying email messages in certain scenarios.  This change has been scheduled many, many months in advance.   This post is just a reminder to raise awareness and to hopefully ensure that everyone who needs to update their Exchange Online Protection (EOP) connectors has done…

1

How To Disable MAPI/HTTP For A Single Mailbox

This is one of those handy little tricks to keep in a toolbox to narrow down issues when troubleshooting.  It can be useful to understand if the client is connecting via Outlook Anywhere or MAPI/HTTP.  To troubleshoot such issues MAPI/HTTP can be disabled on the client, and then re-tested to see if the issue continues. …

0

Load Balancing AD FS Services In Azure RM

As mentioned in this blog’s previous posts on deploying AD FS, one option is to deploy all or part of the AD FS solution in Azure.  This is very valuable if there is insufficient capacity on-premises or if you only have a single datacentre and wish to increase resiliency. Deploying the AD FS solution or…

0

Change AD FS 2012 R2 Service Account Password

One of the added features in AD FS 2012 R2 was the ability to leverage group managed service accounts (gMSA) which obviated the requirement to manually change the password associated with the service account.  See Getting Started with Group Managed Service Accounts for some background on gMSA.  You may also see the term sMSA which…

0

Quick Tip: Is There A Shortcut URL To Download Online Sign In Assistant

For those wondering what the download page is for the Microsoft Online Services Sign In Assistant, using your favourite search engine in your favourite browser is one choice. Alternatively you can use the handy dandy shortcut URL: https://aka.ms/SIA   This will take you to the latest version of the Sign In Assistant download page.  …

0