Knowledgebase on JanBakker.tech

KB - employeeLeaveDateTime show empty (null)

Mon, 06 Jul 2026 09:41:25 +0000

This is a knowledge base item. I hope it will help you someday.

The issue#

When syncing the employeeLeaveDateTime attribute to Entra ID, the value shows null.

In this example, I use Graph Explorer to check the value.

KB - Entra Private Access Session persistence

Wed, 08 Apr 2026 13:21:31 +0000

This is a knowledge base item. I hope it will help you someday.

**Update:**This setting can also be set from the Entra admin center now.

It can be set under the Network access properties of the Enterprise Application.

Conditional Access Optimization Agent knowledge base

Sun, 15 Mar 2026 06:57:10 +0000

Y’all know this song by the Beatles, right?

What would you think if I sang out of tune?
Would you stand up and walk out on me?
Lend me your ears, and I’ll sing you a song
And I’ll try not to sing out of key

Oh, I get by with a little help from my friends
Mmm, I get high with a little help from my friends
Ooh, I’m gonna try with a little help from my friends

KB - Enable Single Sign On for Windows 365 Cloud PC

Tue, 28 Oct 2025 20:00:18 +0000

This short tutorial explains how to enable Single Sign-On for Windows 365 Cloud PC using the Graph Explorer.

On Microsoft Learn, we can already find instructions for using PowerShell, but I’m a big fan of using the Graph API and Graph Explorer.

KB - Failed to verify domain name - Entra ID

Sat, 11 Oct 2025 06:54:50 +0000

This is a knowledge base item. Hope it will help you someday.

The issue#

When adding a custom domain to Entra ID, you are unable to get it verified. The error:

Unable to verify domain name. Ensure you have added the record above at the registrar for ‘yourdomain.com’, and try again in a little while. Click here for more information.

Security Info Registration. Entra ID's rabbit hole.

Fri, 29 Aug 2025 14:01:26 +0000

This blog post needs a brief introduction. Bear with me.

Five years ago, I spent a significant amount of time creating a blog post about the Combined Registration Wizard in Entra ID. It took many hours to capture the screenshots, as every change in the settings took 20 minutes to take effect. However, I’m glad I took that effort, because it has helped me to this very day.

Viewing changes to Conditional Access policies just became easier!

Mon, 12 Feb 2024 15:40:55 +0000

Today, a quick tip for all Entra admins out there. Conditional Access policies can be subject to change. When a policy is changed, its not very easy to see what changed. From the audit logs, this is how it looks:

Microsoft icons

Fri, 19 May 2023 08:26:07 +0000

That’s the post for today. Just a bunch of sources with icons from Microsoft 365, Azure, Azure AD, and other Microsoft-related services. This can be super handy if you need high-quality images for your excellent slides and documentation. Enjoy!

Do you have a source to add? Drop me an email! Happy to keep this list going.

KB - Write requests (excluding DELETE) must contain the Content-Type header declaration.

Wed, 21 Sep 2022 18:32:41 +0000

This is a knowledgebase item. I hope it helps you out someday.

The issue#

When using the HTTP action in Power Automate or Logic Apps in combination with Graph API, you get the following error:

Write requests (excluding DELETE) must contain the Content-Type header declaration.

KB - mobile phone number not in sync Azure AD Connect

Sun, 01 May 2022 15:47:20 +0000

This is a knowledgebase item. Hope it helps you out someday.

The issue#

Some users reported that the mobile phone number in Azure Active Directory / Office 365 was different from the number in on-prem Active Directory. Even though these users were synced with Azure AD Connect, the mobile phone attribute was no longer in sync.

KB - SelfServicePasswordReset write-back problem - error hr=80230818

Mon, 21 Feb 2022 14:06:19 +0000

This is a knowledgebase item. Hope it helps you out someday.

Now, since you landed on this page, I assume you’ve got the following issue:

Azure AD SelfService Password Reset worked like a charm for quite some time.
All of the sudden it stopped working, and you have no idea why. You have checked the permissions on the service account, and all looks good.
You are in a hybrid setup, and use password write back. All checkmarks are green.
Azure AD audit logs contain OnPremisesAdminActionRequired or ADAdminActionRequired as failure.

Your users are prompted with this error when trying to do a password reset using Azure AD Self Service Password Reset Portal.

ADMX ingestion for Centero Agent and Carillon Client using Intune

Sun, 20 Feb 2022 20:29:23 +0000

This article is about the ADMX templates for Centero Agent and Carillon client, that you can use to configure the settings on your endpoints. Microsoft Endpoint Manager (Intune) is capable of ADMX ingestion, but this process can be complex sometimes. This article will explain the ADMX ingestion and has a couple of examples, on how to handle various settings.

KB - Add account operation is blocked by policy on the device

Sat, 02 Oct 2021 05:35:28 +0000

This is a knowledgebase item. Hope it helps you out someday.

Error#

Add work or school account in Windows 10 or 11 fails with this message: “add account operation is blocked by policy on the device”. Error code: CAA50101