From 58d0864478c992c8be624efbd299de84a0a594e9 Mon Sep 17 00:00:00 2001
From: AdminDroid <49208841+admindroid-community@users.noreply.github.com>
Date: Fri, 27 Mar 2020 17:26:24 +0530
Subject: [PATCH 1/2] Office 365 license expiry date report
Office 365 license expiry date report
---
.../LicenseExpiryDateReport.ps1 | 197 ++++++++++++++++++
.../LicenseFriendlyName.txt | 126 +++++++++++
2 files changed, 323 insertions(+)
create mode 100644 LicenseExpiryDateReport/LicenseExpiryDateReport.ps1
create mode 100644 LicenseExpiryDateReport/LicenseFriendlyName.txt
diff --git a/LicenseExpiryDateReport/LicenseExpiryDateReport.ps1 b/LicenseExpiryDateReport/LicenseExpiryDateReport.ps1
new file mode 100644
index 0000000..a3c5554
--- /dev/null
+++ b/LicenseExpiryDateReport/LicenseExpiryDateReport.ps1
@@ -0,0 +1,197 @@
+Param
+(
+ [Parameter(Mandatory = $false)]
+ [switch]$Trial,
+ [switch]$Free,
+ [switch]$Purchased,
+ [Switch]$Expired,
+ [Switch]$Active,
+ [string]$UserName,
+ [string]$Password
+)
+
+#Check for MSOnline module
+$Module=Get-Module -Name MSOnline -ListAvailable
+if($Module.count -eq 0)
+{
+ Write-Host MSOnline module is not available -ForegroundColor yellow
+ $Confirm= Read-Host Are you sure you want to install module? [Y] Yes [N] No
+ if($Confirm -match "[yY]")
+ {
+ Install-Module MSOnline
+ Import-Module MSOnline
+ }
+ else
+ {
+ Write-Host MSOnline module is required to connect AzureAD.Please install module using Install-Module MSOnline cmdlet.
+ Exit
+ }
+}
+
+#Storing credential in script for scheduling purpose/ Passing credential as parameter
+if(($UserName -ne "") -and ($Password -ne ""))
+{
+ $SecuredPassword = ConvertTo-SecureString -AsPlainText $Password -Force
+ $Credential = New-Object System.Management.Automation.PSCredential $UserName,$SecuredPassword
+ Connect-MsolService -Credential $credential
+}
+else
+{
+ Connect-MsolService | Out-Null
+}
+
+$Result=""
+$Results=@()
+$Print=0
+$ShowAllSubscription=$False
+$PrintedOutput=0
+
+#Output file declaration
+$ExportCSV=".\LicenseExpiryReport_$((Get-Date -format yyyy-MMM-dd-ddd` hh-mm` tt).ToString()).csv"
+
+#Check for filters
+if((!($Trial.IsPresent)) -and (!($Free.IsPresent)) -and (!($Purchased.IsPresent)) -and (!($Expired.IsPresent)) -and (!($Active.IsPresent)))
+{
+ $ShowAllSubscription=$true
+}
+
+#FriendlyName list for license plan
+$FriendlyNameHash=@()
+$FriendlyNameHash=Get-Content -Raw -Path .\LicenseFriendlyName.txt -ErrorAction Stop | ConvertFrom-StringData
+
+#Get available subscriptions in the tenant
+$Subscriptions= Get-MsolSubscription | foreach{
+ $SubscriptionName=$_.SKUPartNumber
+ $SubscribedOn=$_.DateCreated
+ $ExpiryDate=$_.NextLifeCycleDate
+ $Status=$_.Status
+ $TotalLicenses=$_.TotalLicenses
+ $Print=0
+
+ #Convert Skuid to friendly name
+ $EasyName=$FriendlyNameHash[$SubscriptionName]
+ $EasyName
+ if(!($EasyName))
+ {
+ $NamePrint=$SubscriptionName
+ }
+ else
+ {
+ $NamePrint=$EasyName
+ }
+
+ #Convert Subscribed date to friendly subscribed date
+ $SubscribedDate=(New-TimeSpan -Start $SubscribedOn -End (Get-Date)).Days
+ if($SubscribedDate -eq 0)
+ {
+ $SubscribedDate="Today"
+ }
+ else
+ {
+ $SubscribedDate="$SubscribedDate days ago"
+ }
+ $SubscribedDate="(" + $SubscribedDate + ")"
+ $SubscribedDate="$SubscribedOn $SubscribedDate"
+
+ #Determine subscription type
+ If($_.IsTrial -eq $False)
+ {
+ if(($SubscriptionName -like "*Free*") -or ($ExpiryDate -eq $null))
+ {
+ $SubscriptionType="Free"
+ }
+ else
+ {
+ $SubscriptionType="Purchased"
+ }
+ }
+ else
+ {
+ $SubscriptionType="Trial"
+ }
+
+ #Friendly Expiry Date
+ if($ExpiryDate -ne $null)
+ {
+ $FriendlyExpiryDate=(New-TimeSpan -Start (Get-Date) -End $ExpiryDate).Days
+ if($Status -eq "Enabled")
+ {
+ $FriendlyExpiryDate="Will expire in $FriendlyExpiryDate days"
+ }
+ elseif($Status -eq "Warning")
+ {
+ $FriendlyExpiryDate="Expired.Will suspend in $FriendlyExpiryDate days"
+ }
+ elseif($Status -eq "Suspended")
+ {
+ $FriendlyExpiryDate="Expired.Will delete in $FriendlyExpiryDate days"
+ }
+ elseif($Status -eq "LockedOut")
+ {
+ $FriendlyExpiryDate="Subscription is locked.Please contact Microsoft"
+ }
+ }
+ else
+ {
+ $ExpiryDate="-"
+ $FriendlyExpiryDate="Never Expires"
+ }
+
+ #Check for filters
+ if($ShowAllSubscription -eq $true)
+ {
+ $Print=1
+ }
+ else
+ {
+ if(($Trial.IsPresent) -and ($SubscriptionType -eq "Trial"))
+ {
+ $Print=1
+ }
+ if(($Free.IsPresent) -and ($SubscriptionType -eq "Free"))
+ {
+ $Print=1
+ }
+ if(($Purchased.IsPresent) -and ($SubscriptionType -eq "Purchased"))
+ {
+ $Print=1
+ }
+ if(($Expired.IsPresent) -and ($Status -ne "Enabled"))
+ {
+ $Print=1
+ }
+ if(($Active.IsPresent) -and ($Status -eq "Enabled"))
+ {
+ $Print=1
+ }
+ }
+
+
+
+ #Export result to csv
+ if($Print -eq 1)
+ {
+ $PrintedOutput++
+ $Result=@{'Subscription Name'=$SubscriptionName;'Friendly Subscription Name'=$NamePrint;'Subscribed Date'=$SubscribedDate;'Total Licenses'=$TotalLicenses;'License Expiry Date/Next LifeCycle Activity Date'=$ExpiryDate;'Friendly Expiry Date'=$FriendlyExpiryDate;'Subscription Type'=$SubscriptionType;'Status'=$Status}
+ $Results= New-Object PSObject -Property $Result
+ $Results | Select-Object 'Subscription Name','Friendly Subscription Name','Subscribed Date','Total Licenses','Subscription Type','License Expiry Date/Next LifeCycle Activity Date','Friendly Expiry Date','Status' | Export-Csv -Path $ExportCSV -Notype -Append
+ }
+}
+
+#Open output file after execution
+if((Test-Path -Path $ExportCSV) -eq "True")
+{
+ Write-Host `nOffice 365 license expiry report available in: $ExportCSV -ForegroundColor Green
+ Write-Host `nThe Output file contains $PrintedOutput subscriptions
+ $Prompt = New-Object -ComObject wscript.shell
+ $UserInput = $Prompt.popup("Do you want to open output files?",`
+ 0,"Open Files",4)
+ If ($UserInput -eq 6)
+ {
+ Invoke-Item "$ExportCSV"
+ }
+}
+else
+{
+ Write-Host No subscription found.
+}
\ No newline at end of file
diff --git a/LicenseExpiryDateReport/LicenseFriendlyName.txt b/LicenseExpiryDateReport/LicenseFriendlyName.txt
new file mode 100644
index 0000000..dda56ff
--- /dev/null
+++ b/LicenseExpiryDateReport/LicenseFriendlyName.txt
@@ -0,0 +1,126 @@
+
+ O365_BUSINESS_ESSENTIALS = Office 365 Business Essentials
+ O365_BUSINESS_PREMIUM = Office 365 Business Premium
+ DESKLESSPACK = Office 365 (Plan K1)
+ DESKLESSWOFFPACK = Office 365 (Plan K2)
+ LITEPACK = Office 365 (Plan P1)
+ EXCHANGESTANDARD = Office 365 Exchange Online Only
+ STANDARDPACK = Enterprise Plan E1
+ STANDARDWOFFPACK = Office 365 (Plan E2)
+ ENTERPRISEPACK = Enterprise Plan E3
+ ENTERPRISEPACKLRG = Enterprise Plan E3
+ ENTERPRISEWITHSCAL = Enterprise Plan E4
+ STANDARDPACK_STUDENT = Office 365 (Plan A1) for Students
+ STANDARDWOFFPACKPACK_STUDENT = Office 365 (Plan A2) for Students
+ ENTERPRISEPACK_STUDENT = Office 365 (Plan A3) for Students
+ ENTERPRISEWITHSCAL_STUDENT = Office 365 (Plan A4) for Students
+ STANDARDPACK_FACULTY = Office 365 (Plan A1) for Faculty
+ STANDARDWOFFPACKPACK_FACULTY = Office 365 (Plan A2) for Faculty
+ ENTERPRISEPACK_FACULTY = Office 365 (Plan A3) for Faculty
+ ENTERPRISEWITHSCAL_FACULTY = Office 365 (Plan A4) for Faculty
+ ENTERPRISEPACK_B_PILOT = Office 365 (Enterprise Preview)
+ STANDARD_B_PILOT = Office 365 (Small Business Preview)
+ VISIOCLIENT = Visio Pro Online
+ POWER_BI_ADDON = Office 365 Power BI Addon
+ POWER_BI_INDIVIDUAL_USE = Power BI Individual User
+ POWER_BI_STANDALONE = Power BI Stand Alone
+ POWER_BI_STANDARD = Power-BI Standard
+ PROJECTESSENTIALS = Project Lite
+ PROJECTCLIENT = Project Professional
+ PROJECTONLINE_PLAN_1 = Project Online
+ PROJECTONLINE_PLAN_2 = Project Online and PRO
+ ProjectPremium = Project Online Premium
+ ECAL_SERVICES = ECAL
+ EMS = Enterprise Mobility Suite
+ RIGHTSMANAGEMENT_ADHOC = Windows Azure Rights Management
+ MCOMEETADV = PSTN conferencing
+ SHAREPOINTSTORAGE = SharePoint storage
+ PLANNERSTANDALONE = Planner Standalone
+ CRMIUR = CMRIUR
+ BI_AZURE_P1 = Power BI Reporting and Analytics
+ INTUNE_A = Windows Intune Plan A
+ PROJECTWORKMANAGEMENT = Office 365 Planner Preview
+ ATP_ENTERPRISE = Exchange Online Advanced Threat Protection
+ EQUIVIO_ANALYTICS = Office 365 Advanced eDiscovery
+ AAD_BASIC = Azure Active Directory Basic
+ RMS_S_ENTERPRISE = Azure Active Directory Rights Management
+ AAD_PREMIUM = Azure Active Directory Premium
+ MFA_PREMIUM = Azure Multi-Factor Authentication
+ STANDARDPACK_GOV = Microsoft Office 365 (Plan G1) for Government
+ STANDARDWOFFPACK_GOV = Microsoft Office 365 (Plan G2) for Government
+ ENTERPRISEPACK_GOV = Microsoft Office 365 (Plan G3) for Government
+ ENTERPRISEWITHSCAL_GOV = Microsoft Office 365 (Plan G4) for Government
+ DESKLESSPACK_GOV = Microsoft Office 365 (Plan K1) for Government
+ ESKLESSWOFFPACK_GOV = Microsoft Office 365 (Plan K2) for Government
+ EXCHANGESTANDARD_GOV = Microsoft Office 365 Exchange Online (Plan 1) only for Government
+ EXCHANGEENTERPRISE_GOV = Microsoft Office 365 Exchange Online (Plan 2) only for Government
+ SHAREPOINTDESKLESS_GOV = SharePoint Online Kiosk
+ EXCHANGE_S_DESKLESS_GOV = Exchange Kiosk
+ RMS_S_ENTERPRISE_GOV = Windows Azure Active Directory Rights Management
+ OFFICESUBSCRIPTION_GOV = Office ProPlus
+ MCOSTANDARD_GOV = Lync Plan 2G
+ SHAREPOINTWAC_GOV = Office Online for Government
+ SHAREPOINTENTERPRISE_GOV = SharePoint Plan 2G
+ EXCHANGE_S_ENTERPRISE_GOV = Exchange Plan 2G
+ EXCHANGE_S_ARCHIVE_ADDON_GOV = Exchange Online Archiving
+ EXCHANGE_S_DESKLESS = Exchange Online Kiosk
+ SHAREPOINTDESKLESS = SharePoint Online Kiosk
+ SHAREPOINTWAC = Office Online
+ YAMMER_ENTERPRISE = Yammer for the Starship Enterprise
+ EXCHANGE_L_STANDARD = Exchange Online (Plan 1)
+ MCOLITE = Lync Online (Plan 1)
+ SHAREPOINTLITE = SharePoint Online (Plan 1)
+ OFFICE_PRO_PLUS_SUBSCRIPTION_SMBIZ = Office ProPlus
+ EXCHANGE_S_STANDARD_MIDMARKET = Exchange Online (Plan 1)
+ MCOSTANDARD_MIDMARKET = Lync Online (Plan 1)
+ SHAREPOINTENTERPRISE_MIDMARKET = SharePoint Online (Plan 1)
+ OFFICESUBSCRIPTION = Office ProPlus
+ YAMMER_MIDSIZE = Yammer
+ DYN365_ENTERPRISE_PLAN1 = Dynamics 365 Customer Engagement Plan Enterprise Edition
+ ENTERPRISEPREMIUM_NOPSTNCONF = Enterprise E5 (without Audio Conferencing)
+ ENTERPRISEPREMIUM = Enterprise E5 (with Audio Conferencing)
+ MCOSTANDARD = Skype for Business Online Standalone Plan 2
+ PROJECT_MADEIRA_PREVIEW_IW_SKU = Dynamics 365 for Financials for IWs
+ STANDARDWOFFPACK_IW_STUDENT = Office 365 Education for Students
+ STANDARDWOFFPACK_IW_FACULTY = Office 365 Education for Faculty
+ EOP_ENTERPRISE_FACULTY = Exchange Online Protection for Faculty
+ EXCHANGESTANDARD_STUDENT = Exchange Online (Plan 1) for Students
+ OFFICESUBSCRIPTION_STUDENT = Office ProPlus Student Benefit
+ STANDARDWOFFPACK_FACULTY = Office 365 Education E1 for Faculty
+ STANDARDWOFFPACK_STUDENT = Microsoft Office 365 (Plan A2) for Students
+ DYN365_FINANCIALS_BUSINESS_SKU = Dynamics 365 for Financials Business Edition
+ DYN365_FINANCIALS_TEAM_MEMBERS_SKU = Dynamics 365 for Team Members Business Edition
+ FLOW_FREE = Microsoft Flow Free
+ POWER_BI_PRO = Power BI Pro
+ O365_BUSINESS = Office 365 Business
+ DYN365_ENTERPRISE_SALES = Dynamics Office 365 Enterprise Sales
+ RIGHTSMANAGEMENT = Rights Management
+ PROJECTPROFESSIONAL = Project Professional
+ VISIOONLINE_PLAN1 = Visio Online Plan 1
+ EXCHANGEENTERPRISE = Exchange Online Plan 2
+ DYN365_ENTERPRISE_P1_IW = Dynamics 365 P1 Trial for Information Workers
+ DYN365_ENTERPRISE_TEAM_MEMBERS = Dynamics 365 For Team Members Enterprise Edition
+ CRMSTANDARD = Microsoft Dynamics CRM Online Professional
+ EXCHANGEARCHIVE_ADDON = Exchange Online Archiving For Exchange Online
+ EXCHANGEDESKLESS = Exchange Online Kiosk
+ SPZA_IW = App Connect
+ WINDOWS_STORE = Windows Store for Business
+ MCOEV = Microsoft Phone System
+ VIDEO_INTEROP = Polycom Skype Meeting Video Interop for Skype for Business
+ SPE_E5 = Microsoft 365 E5
+ SPE_E3 = Microsoft 365 E3
+ ATA = Advanced Threat Analytics
+ MCOPSTN2 = Domestic and International Calling Plan
+ FLOW_P1 = Microsoft Flow Plan 1
+ FLOW_P2 = Microsoft Flow Plan 2
+DeveloperPack = Office 365 Enterprise E3 Developer Pack
+DEVELOPERPACK_E5 = Office 365 Enterprise E5 Developer Pack
+EMSPremium = Enterprise Mobility + Security E5
+RightsManagemnt =Azure Information Protection Plan 1
+DYN365_ENTERPRISE_CUSTOMER_SERVICE =Dynamics 365 for Customer Service Enterprise Edition
+POWERFLOW_P1 = Microsoft PowerApps Plan 1
+POWERFLOW_P2 = Microsoft PowerApps Plan 2
+AAD_PREMIUM_P1 = Azure Active Directory Premium P2
+AAD_PREMIUM_P2 = Azure Active Directory Premium P2
+D365_MARKETING_USER = Microsoft Dynamics 365 Customer Engagement Plan
+INFOPROTECTION_P2 = Azure Information Protection Plan 2
\ No newline at end of file
From 43972205379125d68fec27066caf62cdf91770c7 Mon Sep 17 00:00:00 2001
From: AdminDroid <49208841+admindroid-community@users.noreply.github.com>
Date: Fri, 27 Mar 2020 17:36:03 +0530
Subject: [PATCH 2/2] External Warning for Office 365 External Emails
This script will prepend 'External' in subject and add 'Disclaimer' for external emails.
---
.../ExternalWarningRule.ps1 | 112 ++++++++++++++++++
1 file changed, 112 insertions(+)
create mode 100644 External Warning Rule for External Emails/ExternalWarningRule.ps1
diff --git a/External Warning Rule for External Emails/ExternalWarningRule.ps1 b/External Warning Rule for External Emails/ExternalWarningRule.ps1
new file mode 100644
index 0000000..17b8678
--- /dev/null
+++ b/External Warning Rule for External Emails/ExternalWarningRule.ps1
@@ -0,0 +1,112 @@
+#Create mail flow rule for adding External warning message for external mails
+Param
+(
+ [Parameter(Mandatory = $false)]
+ [switch]$MFA,
+ [string]$ExcludeGroupMembers,
+ [string]$ExcludeMB,
+ [string]$UserName,
+ [string]$Password
+)
+Get-PSSession | Remove-PSSession
+#Authentication using MFA
+if($MFA.IsPresent)
+{
+ $MFAExchangeModule = ((Get-ChildItem -Path $($env:LOCALAPPDATA+"\Apps\2.0\") -Filter CreateExoPSSession.ps1 -Recurse ).FullName | Select-Object -Last 1)
+ If ($MFAExchangeModule -eq $null)
+ {
+ Write-Host `nPlease install Exchange Online MFA Module. -ForegroundColor yellow
+ Write-Host You can manually install module using below blog : `nhttps://o365reports.com/2019/04/17/connect-exchange-online-using-mfa/ `nOR you can install module directly by entering "Y"`n
+ $Confirm= Read-Host `nAre you sure you want to install module directly? [Y] Yes [N] No
+ if($Confirm -match "[Y]")
+ {
+ Start-Process "iexplore.exe" "https://cmdletpswmodule.blob.core.windows.net/exopsmodule/Microsoft.Online.CSE.PSModule.Client.application"
+ }
+ else
+ {
+ Start-Process 'https://o365reports.com/2019/04/17/connect-exchange-online-using-mfa/'
+ Exit
+ }
+ $Confirmation= Read-Host Have you installed Exchange Online MFA Module? [Y] Yes [N] No
+ if($Confirmation -match "[yY]")
+ {
+ $MFAExchangeModule = ((Get-ChildItem -Path $($env:LOCALAPPDATA+"\Apps\2.0\") -Filter CreateExoPSSession.ps1 -Recurse ).FullName | Select-Object -Last 1)
+ If ($MFAExchangeModule -eq $null)
+ {
+ Write-Host Exchange Online MFA module is not available -ForegroundColor red
+ Exit
+ }
+ }
+ else
+ {
+ Write-Host Exchange Online PowerShell Module is required
+ Start-Process 'https://o365reports.com/2019/04/17/connect-exchange-online-using-mfa/'
+ Exit
+ }
+ }
+
+ #Importing Exchange MFA Module
+ . "$MFAExchangeModule"
+ Write-Host Enter credential in prompt to connect to Exchange Online
+ Connect-EXOPSSession -WarningAction SilentlyContinue
+}
+
+#Authentication using non-MFA
+else
+{
+ #Storing credential in script for scheduling purpose/ Passing credential as parameter
+ if(($UserName -ne "") -and ($Password -ne ""))
+ {
+ $SecuredPassword = ConvertTo-SecureString -AsPlainText $Password -Force
+ $Credential = New-Object System.Management.Automation.PSCredential $UserName,$SecuredPassword
+ }
+ else
+ {
+ $Credential=Get-Credential -Credential $null
+ }
+ $Session = New-PSSession -ConfigurationName Microsoft.Exchange -ConnectionUri https://outlook.office365.com/powershell-liveid/ -Credential $Credential -Authentication Basic -AllowRedirection -WarningAction SilentlyContinue
+ Import-PSSession $Session -AllowClobber -DisableNameChecking | Out-Null
+}
+$Disclaimer='CAUTION: This email originated from outside of the organization. Do not click links or open attachments unless you recognize the sender and know the content is safe.
'
+$ExcludeGroups=@()
+$ExcludeMBs=@()
+
+#Check for exclude groups
+if([string]$ExcludeGroupMembers -ne "")
+{
+ $Groups= $ExcludeGroupMembers -Split ","
+ #Check whether the grup exists
+ foreach($Group in $Groups)
+ {
+ $check=Get-DistributionGroup -Identity $Group -ErrorAction SilentlyContinue
+ if($check -eq $null)
+ {
+ $check=Get-UnifiedGroup -Identity $Group -ErrorAction silentlycontinue
+ if($check -eq $null)
+ {
+ Write-Host $Group not exist in the tenant -ForegroundColor Red
+ continue
+ }
+ }
+ $ExcludeGroups +=$Group
+ }
+ Write-Host `nCreating mail flow rule for External Senders... -ForegroundColor Yellow
+ New-TransportRule "External Email Warning" -FromScope NotInOrganization -SentToScope InOrganization -PrependSubject [EXTERNAL]: -Priority 0 -ApplyHtmlDisclaimerText $Disclaimer -ExceptIfSentToMemberOf $ExcludeGroups -ApplyHtmlDisclaimerLocation Prepend -ApplyHtmlDisclaimerFallbackAction Wrap
+}
+#Create Transport rule with exclude mailbox that in To and CC
+elseif($ExcludeMB -ne "")
+{
+ $MBs= $ExcludeMB -Split ","
+ #Check whether the grup exists
+ foreach($MB in $MBs)
+ {
+ $ExcludeMBs +=$MB
+ }
+ Write-Host `nCreating mail flow rule for External Senders... -ForegroundColor Yellow
+ New-TransportRule "External Email Warning" -FromScope NotInOrganization -SentToScope InOrganization -PrependSubject [EXTERNAL]: -Priority 0 -ApplyHtmlDisclaimerText $Disclaimer -ExceptIfAnyOfToCCHeader $ExcludeMBs -ApplyHtmlDisclaimerLocation Prepend -ApplyHtmlDisclaimerFallbackAction Wrap
+}
+else
+{
+Write-Host Creating mail flow rule for External Senders... -ForegroundColor Yellow
+New-TransportRule "External Email Warning" -FromScope NotInOrganization -SentToScope InOrganization -PrependSubject [EXTERNAL]: -Priority 0 -ApplyHtmlDisclaimerText $Disclaimer -ApplyHtmlDisclaimerLocation Prepend -ApplyHtmlDisclaimerFallbackAction Wrap
+}
\ No newline at end of file