A while ago, I posted an article that described how to convert a cloud user into an Entra ID snyched user from local. See https://www.ajni.it/2022/05/convert-already-microsoft-365-cloud-users-into-azure-ad-synced-users/. This article describes roughly the procedure but it does not work anymore because the PowerShell Module is outdated. Here is how you can do it in 2025:

Preferrably, you will execute this on a computer that both has Active Directory Module and Microsoft.Graph Module.

Install-Module Microsoft.Graph

connect-mggraph -scopes “user.readwrite.all” (select for entire organization)

$upn = “aku@ajni.it”
The objectGUID needs to be in Base64 format.
$id = [system.convert]::ToBase64String((Get-ADUser -filter {userprincipalname -eq $upn}).objectGUid.ToByteArray())

Update-MgUser -UserId $upn -OnPremisesImmutableId $id

Start-ADSyncSyncCycle -PolicyType Delta

Enjoy!

If you are getting this error when trying to login to Microsoft 365 Apps, this fix might help. The error says “Your computer’s Trusted Platform Module has malfunctioned. Error Code 80090034.

To fix that, configured this registry key/value:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\Protect\Providers\df9d8cd0-1501-11d1-8c7a-00c04fc297eb

DWORD Protectionpolicy 1

The value 1 indicates a specific setting, but without direct documentation from Microsoft, the precise effect of 1 on this policy isn’t readily available. It typically refers to enabling or enforcing a particular cryptographic protection policy, possibly related to password protection or other cryptographic functions in Windows.

This was tested on Windows 10.

This Monday, 13th of January 2025 was a bad day for sysadmins. Outlook and other Microsoft 365 / Office Apps would crash upon start because of a new update pushed by Microsoft. The message says something about react-navis-win32.dll missing. The only fix is to install the December 2024 Updates to fix the issue.

This configuration XML File install the December 2024 updates. Beware: This configuration is for Windows Server 2016 RDS and note that automatic updates are disabled.

<Configuration ID="e2abcd00-6229-40cc-be2d-e3a8ff5efb34">
  <Add OfficeClientEdition="32" Channel="Broad">
    <Product ID="O365BusinessRetail">
      <Language ID="de-de" />
      <Version ID="16.0.17328.20670"/>
      <ExcludeApp ID="Groove" />
      <ExcludeApp ID="Lync" />
      <ExcludeApp ID="OneDrive" />
      <ExcludeApp ID="Teams" />
    </Product>
  </Add>
  <Property Name="SharedComputerLicensing" Value="1" />
  <Property Name="SCLCacheOverride" Value="0" />
  <Property Name="AUTOACTIVATE" Value="0" />
  <Property Name="FORCEAPPSHUTDOWN" Value="FALSE" />
  <Property Name="DeviceBasedLicensing" Value="0" />
  <Updates Enabled="FALSE" />
  <RemoveMSI />
  <Display Level="None" AcceptEULA="TRUE" />
</Configuration>

To download data hit setup.exe /download configuration.xml

To install execute setup.exe /configure configuration.xml

References:

https://borncity.com/win/2025/01/13/microsoft-outlook-365-or-other-ms-365-apps-are-dropping-suddenly-errors/

These 3 registry keys will help you block the rollout of Outlook NEW which is like a lot of Microsoft products a half baked solution that is being pushed by force to push something new.

This key hides the “Try new Outlook” toggle in the top right:

HKEY_CURRENT_USER
Software\Microsoft\Office\16.0\Outlook\Options\General
name HideNewOutlookToggle
type REG_DWORD
data 0x1 (1)

These key disables migration to new Outlook:

HKEY_CURRENT_USER
Software\Microsoft\Office\16.0\Outlook\Options\General
name DoNewOutlookAutoMigration
type REG_DWORD
data 0x0 (0)

HKEY_CURRENT_USER
Software\Policies\Microsoft\office\16.0\outlook\preferences
name NewOutlookMigrationUserSetting
type REG_DWORD
data 0x0 (0)

If OneDrive and Microsoft 365 credentials are not being saved in your FSLogix deployment (Azure Virtual Desktop, Citrix etc.) this registry key might help you. There is also a corresponding GPO that does the same.

HKEY_LOCAL_MACHINE\SOFTWARE\FSLogix\Profiles

DWORD – RoamIdentity

Value – 1

Sources:

https://blog.rdorman.net/onedrive-avd-fslogix-password-prompts/