windows

PowerShell: Local client connect to M365 (With-out-Subscribtion)

Chetta Busayarat

• 2 min read
Share
PowerShell: Local client connect to M365 (With-out-Subscribtion)
Photo by Ed Hardie / Unsplash

M365 on web console not allow to using PowerSell (as you don't have subscription). This will help you to connect PowerShell from your local computer to M365 (with scope of permission "User.Read.All", "Group.Read.All", "Directory.Read.All").

  1. Run PowerShell as administrator.
  1. Run command "Exclution Policy" 
Set-ExecutionPolicy RemoteSigned -Scope CurrentUser -Force
  1. Run command to install module "Microsoft Graph"
Import-Module PowerShellGet -Force
Install-Module Microsoft.Graph -Scope CurrentUser -Force

  1. Run command to connect to M365 with device verify
Connect-MgGraph -Scopes "User.Read.All", "Group.Read.All", "Directory.Read.All" -UseDeviceAuthentication
  1. After run this command it will she the code 9 digit, Goto https://login.microsoftonline.com/device and put this code to authenticate.
  1. Fill the code.
  1. It will show the page to select user to authen (or enter user password for user account of M365).
  2. Continue.
  1. Then whe this page showed. You can close this page of browser now.
  1. Back to PowerShell command. It should show welcome page. If show like this it mean you now connected.
  1. Try use commed to find specific email address on user, group and directory on M365.
$TargetEmail = "[email protected]"
                                                             
Write-Host "=== Searching in Users ===" -ForegroundColor Cyan
Get-MgUser -All | Where-Object {                             
    $_.Mail -eq $TargetEmail -or                             
    $_.UserPrincipalName -eq $TargetEmail -or                
    $_.OtherMails -contains $TargetEmail -or                 
    $_.ProxyAddresses -like "*$TargetEmail*"                 
} | Select-Object DisplayName, UserPrincipalName, Mail, UserType, Id
                                                              
Write-Host "=== Searching in Contacts ===" -ForegroundColor Cyan
Get-MgContact -All | Where-Object {                          
    $_.Mail -eq $TargetEmail -or                             
    $_.ProxyAddresses -like "*$TargetEmail*"                 
} | Select-Object DisplayName, Mail, Id                      
                                                             
Write-Host "=== Searching in Groups ===" -ForegroundColor Cyan
Get-MgGroup -All | Where-Object {                            
    $_.Mail -eq $TargetEmail -or                             
    $_.ProxyAddresses -like "*$TargetEmail*"                 
} | Select-Object DisplayName, Mail, GroupTypes, Id
  1. The resual will show if it founded. This sample founded the address in searching in users (Other is not found).
  1. Try another target email address. The rusual is not found.