Microsoft 365 Cloud Administrator based in Houston, TX.

I keep Microsoft 365 tenants secure, compliant, and running smoothly, and I automate the repetitive parts with PowerShell.

• Microsoft 365 administration (Exchange Online, Teams, SharePoint/OneDrive)
• Microsoft Entra ID identity, Conditional Access, MFA, lifecycle management
• Microsoft Intune device management and compliance
• Microsoft Defender threat protection and security posture
• Microsoft Purview data loss prevention, retention, and compliance
• PowerShell & the Microsoft Graph SDK for reporting and automation

• Microsoft Certified: Security, Compliance, and Identity Fundamentals (SC-900)
• Microsoft 365 Certified: Fundamentals (MS-900)

Level 10 | 64 badges | 13 trophies — My Microsoft Learn profile

Completed learning paths:

• Deploy and operate Microsoft Security Copilot
• Create detections and perform investigations using Microsoft Sentinel
• Configure your Microsoft Sentinel environment
• MS-102 Configure your Microsoft 365 tenant
• Manage Microsoft 365 services by using Windows PowerShell
• Implement access management for apps
• Plan and implement an identity governance strategy
• Configure and govern entitlement with Microsoft Entra ID
• Implement an authentication and access management solution
• Implement an identity management solution using Microsoft Entra ID
• Implement Microsoft Purview Information Protection
• Prepare infrastructure for devices using Microsoft Intune and Microsoft Entra ID
• Mitigate threats using Microsoft Defender XDR

• 🧰 m365-powershell-toolkit: read-only Graph/Exchange Online reporting scripts (licensing, stale accounts, external forwarding)
• 🧰 graph-powershell7-admin-toolkit: PowerShell 7 guide and scripts for Microsoft Graph, Purview, Exchange Online, and Entra ID security reporting (certificate auth, least privilege)
• 🧰 sharepoint-online-powershell-toolkit: SharePoint Online site inventory, external sharing audit, permissions, storage and site lifecycle (PnP.PowerShell and SPO module)
• 🧰 exchange-online-powershell-toolkit: Exchange Online mailbox inventory, permission and forwarding audits, message trace, mailbox cleanup and calendar permissions (EXO v3)
• 🧰 entra-id-powershell-toolkit: Entra ID user lifecycle, groups and dynamic groups, app secret expiry, sign-in log analysis, licensing and PIM role reports (Microsoft Graph)
• 🧰 intune-powershell-toolkit: Intune device inventory, compliance, stale device cleanup, app deployment status, profile export and Autopilot import (Microsoft Graph)
• 🧰 teams-powershell-toolkit: Teams inventory, owner and guest audits, orphaned teams, policy assignment, voice basics and channel creation (MicrosoftTeams)
• 🧰 defender-xdr-powershell-toolkit: Defender XDR incidents and alerts, advanced hunting KQL runner, device risk, Secure Score and MDE onboarding (Graph security API)
• 🧰 sentinel-kql-toolkit: Microsoft Sentinel analytics rule export/import, sample KQL detections, incident report and data connector health (Az.SecurityInsights)
• 🧰 purview-compliance-toolkit: Purview label policies, DLP monitoring and rollout, retention labels, eDiscovery, audit log search and insider risk (Connect-IPPSSession)
• 🧰 onedrive-powershell-toolkit: OneDrive inventory and storage, sharing audit, pre-provisioning, departed-user access transfer and Known Folder Move notes (SPO and Graph)

• PowerShell Gallery: powershellgallery.com/profiles/anthonybuhnerkemper (modules: ABK.M365Toolkit, ABK.GraphAdminToolkit, ABK.ConfigMgrToolkit, ABK.CitrixToolkit)
• LinkedIn: linkedin.com/in/leebuhnerkemper