Microsoft Technologies – PhoeNIXBird Networks

[PnP/CSOM] – Reprovision SiteAssets library in SPO

September 1, 2025 Andrei Rachita 0

OK, so here are several ways to re-provision the SiteAssets library on a SharePoint online site collection: Using PnP:

Connect-PnPOnline -Url https://pbnet.sharepoint.com/teams/ASSETS1 `
  -ClientId "dfbd77ff-be64-XXX-XXX-17a62a02fd29" `
  -Tenant "pbnet.onmicrosoft.com" `
  -CertificatePath "C:\SPOPNP\pnpappcert.pfx" `
  -CertificatePassword (ConvertTo-SecureString "XXXXXXXXXX" -AsPlainText -Force)

$Web = Get-PnPWeb
$Web.Lists.EnsureSiteAssetsLibrary()
Invoke-PnPQuery

1

2

3

4

5

6

7

8

9

Connect-PnPOnline -Url https://pbnet.sharepoint.com/teams/ASSETS1 `

-ClientId "dfbd77ff-be64-XXX-XXX-17a62a02fd29" `

-Tenant "pbnet.onmicrosoft.com" `

-CertificatePath "C:\SPOPNP\pnpappcert.pfx" `

-CertificatePassword (ConvertTo-SecureString "XXXXXXXXXX" -AsPlainText -Force)

$Web = Get-PnPWeb

$Web.Lists.EnsureSiteAssetsLibrary()

Invoke-PnPQuery

Using CSOM (no MFA):

Add-Type -Path "C:\CSOM\Microsoft.SharePoint.Client.dll"
Add-Type -Path "C:\CSOM\Microsoft.SharePoint.Client.Runtime.dll"
 
 
# SharePoint site and credentials
$siteUrl = "https://a830edad9050849testasset.sharepoint.com/sites/SITEASSETS1"
$username = "admin@a830edad9050849testasset.onmicrosoft.com"
 
# Get credentials
$securePassword = Read-Host -Prompt "Enter your password" -AsSecureString
$credentials = New-Object Microsoft.SharePoint.Client.SharePointOnlineCredentials($username, $securePassword)
 
# Connect to SharePoint
$context = New-Object Microsoft.SharePoint.Client.ClientContext($siteUrl)
$context.Credentials = $credentials
 
# Get the list and root folder
$t = $context.Web.Lists.EnsureSiteAssetsLibrary()
$context.Load($t)
 
$context.ExecuteQuery()

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

Add-Type -Path "C:\CSOM\Microsoft.SharePoint.Client.dll"

Add-Type -Path "C:\CSOM\Microsoft.SharePoint.Client.Runtime.dll"

# SharePoint site and credentials

$siteUrl = "https://a830edad9050849testasset.sharepoint.com/sites/SITEASSETS1"

$username = "admin@a830edad9050849testasset.onmicrosoft.com"

# Get credentials

$securePassword = Read-Host -Prompt "Enter your password" -AsSecureString

$credentials = New-Object Microsoft.SharePoint.Client.SharePointOnlineCredentials($username, $securePassword)

# Connect to SharePoint

$context = New-Object Microsoft.SharePoint.Client.ClientContext($siteUrl)

$context.Credentials = $credentials

# Get the list and root folder

$t = $context.Web.Lists.EnsureSiteAssetsLibrary()

$context.Load($t)

$context.ExecuteQuery()

[…]

[SPO/PNP] Connect to SharePoint online using PNP and a self-signed certificate

May 21, 2025 Andrei Rachita 0

Since the 3.0.x version of the PNP module, you don’t have the -UseWebLogin switch anymore when using Connect-PnPOnline. So, let’s connect using a self-signed certificate […]

[SPO] Remove retention tags for all the items (folders included) in a document library

April 14, 2025 Andrei Rachita 0

If you tagged all your files/folders in a document library with a retention label/tag, here’s a quick way to remove them via PnP:

Connect-PnPOnline -Url https://mngenvmcap495437.sharepoint.com/sites/RETENTION-TEST1 -UseWebLogin
$items = Get-PnPListItem -List "Documents"

foreach ($item in $items)

{

     Set-PnPListItem -Identity $item.Id -List "Documents" -ClearLabel

}

1

2

3

4

5

6

7

8

9

10

Connect-PnPOnline -Url https://mngenvmcap495437.sharepoint.com/sites/RETENTION-TEST1 -UseWebLogin

$items = Get-PnPListItem -List "Documents"

foreach ($item in $items)

{

Set-PnPListItem -Identity $item.Id -List "Documents" -ClearLabel

}

Enjoy!

[SPO] Get the filename, filetype and path from a SharePoint shared link URL

March 20, 2025 Andrei Rachita 0

OK, so the scenario goes like this: You go to a SharePoint document library, click on the ellipsis next to a file and select “Copy […]

[SPO] Enable default sensitivity labels in SharePoint online

March 6, 2025 Andrei Rachita 0

So, here goes:

# Define the variables for your enviroment. The first one is the link to your SharePoint Admin Portal. The second one is your administrator account User Principal Name
 
$SPAdminLink = "https://tenant-admin.sharepoint.com"
$AdminUPN = "user@domain.com"
 
# Connect to SharePoint. Replace the link with your SharePoint Admin portal
# you need to have run install-module -name Microsoft.Online.SharePoint.PowerShell to have the module installed. 
 
Connect-SPOService -Url $SPAdminLink
 
# Enable AIP Integration
 
Set-SPOTenant -EnableAIPIntegration $true
(Get-SPOTenant).EnableAIPIntegration
 
# Enable support for PDFs. Update SP Online Module if this fails. The link is https://www.microsoft.com/en-us/download/details.aspx?id=35588
 
Set-SPOTenant -EnableSensitivityLabelforPDF $true
(Get-SPOTenant).EnableSensitivityLabelforPDF
 
# Connect to AAD and enable support for labels in groups. Source: https://learn.microsoft.com/en-us/microsoft-365/compliance/sensitivity-labels-teams-groups-sites?view=o365-worldwide
 
Install-Module AzureADPreview
AzureADPreview\Connect-AzureAD
 
$grpUnifiedSetting = (Get-AzureADDirectorySetting | where -Property DisplayName -Value "Group.Unified" -EQ)
$Setting = $grpUnifiedSetting
 
# Check if EnableMIPLabels is enabled. If nothing is displayed then you have no group settings. We'll enable it. 
 
$grpUnifiedSetting.Values
 
# Enable the feature. If it fails check out this guide: https://learn.microsoft.com/en-us/azure/active-directory/enterprise-users/groups-settings-cmdlets#create-settings-at-the-directory-level
 
$Setting["EnableMIPLabels"] = "True"
 
# Check that now it's enabled. If it's enabled you'll get
#
#Name                            Value
#----                            -----
#EnableMIPLabels                 True
 
$Setting.Values                                                                                                                                                                                                    
 
# Save 
 
Set-AzureADDirectorySetting -Id $grpUnifiedSetting.Id -DirectorySetting $Setting
 
# Now we'll import ExchangeOnlineManagement and then connect the Compliance Powershell to sync the labels
 
#You might have problems running the below part in PowerShell ISE. If you do, run them in a normal PowerShell session
#Also, ensure you have the module installed with Install-Module -Name ExchangeOnlineManagement
Import-Module ExchangeOnlineManagement
Connect-IPPSSession -UserPrincipalName $AdminUPN
Execute-AzureAdLabelSync

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47

48

49

50

51

52

53

54

55

# Define the variables for your enviroment. The first one is the link to your SharePoint Admin Portal. The second one is your administrator account User Principal Name

$SPAdminLink = "https://tenant-admin.sharepoint.com"

$AdminUPN = "user@domain.com"

# Connect to SharePoint. Replace the link with your SharePoint Admin portal

# you need to have run install-module -name Microsoft.Online.SharePoint.PowerShell to have the module installed.

Connect-SPOService -Url $SPAdminLink

# Enable AIP Integration

Set-SPOTenant -EnableAIPIntegration $true

(Get-SPOTenant).EnableAIPIntegration

# Enable support for PDFs. Update SP Online Module if this fails. The link is https://www.microsoft.com/en-us/download/details.aspx?id=35588

Set-SPOTenant -EnableSensitivityLabelforPDF $true

(Get-SPOTenant).EnableSensitivityLabelforPDF

# Connect to AAD and enable support for labels in groups. Source: https://learn.microsoft.com/en-us/microsoft-365/compliance/sensitivity-labels-teams-groups-sites?view=o365-worldwide

Install-Module AzureADPreview

AzureADPreview\Connect-AzureAD

$grpUnifiedSetting = (Get-AzureADDirectorySetting | where -Property DisplayName -Value "Group.Unified" -EQ)

$Setting = $grpUnifiedSetting

# Check if EnableMIPLabels is enabled. If nothing is displayed then you have no group settings. We'll enable it.

$grpUnifiedSetting.Values

# Enable the feature. If it fails check out this guide: https://learn.microsoft.com/en-us/azure/active-directory/enterprise-users/groups-settings-cmdlets#create-settings-at-the-directory-level

$Setting["EnableMIPLabels"] = "True"

# Check that now it's enabled. If it's enabled you'll get

#

#Name Value

#---- -----

#EnableMIPLabels True

$Setting.Values

# Save

Set-AzureADDirectorySetting -Id $grpUnifiedSetting.Id -DirectorySetting $Setting

# Now we'll import ExchangeOnlineManagement and then connect the Compliance Powershell to sync the labels

#You might have problems running the below part in PowerShell ISE. If you do, run them in a normal PowerShell session

#Also, ensure you have the module installed with Install-Module -Name ExchangeOnlineManagement

Import-Module ExchangeOnlineManagement

Connect-IPPSSession -UserPrincipalName $AdminUPN

Execute-AzureAdLabelSync

Create and publish your label, then wait around 24h to have everything propagated. If you get any error with the following […]

[SPO-PowerShell] User-Friendly script to enable or disable DenyAddAndCustomizePages

February 28, 2024 Andrei Rachita 0

Official article: https://learn.microsoft.com/en-us/sharepoint/allow-or-prevent-custom-script#to-allow-custom-script-on-other-sharepoint-sites So, here goes: #gathering the tenant name Write-Host “DenyAddAndCustomizePages checker and enabler/disabler” write-host “=====================================================” $tenantname = Read-Host “Enter your tenant’s name” #connecting […]

[SPO] Send e-mail from site using PNP

January 19, 2024 Andrei Rachita 0

So, here goes:

Import-Module Microsoft.Online.SharePoint.Powershell -DisableNameChecking

 

#Config Parameters                                                                

$AdminSiteURL = https://tenant-admin.sharepoint.com/

$EmailFrom =admin@tenant.onmicrosoft.com

$EmailTo = admin2@tenant.onmicrosoft.com

$Subject ="Utilities test"

$SiteURL = https://tenant.sharepoint.com/sites/testsite

 

#Setup Credentials and connect

$Cred = Get-Credential

Connect-SPOService -Url $AdminSiteURL -Credential $Cred

 

#Get site info 

$SiteStorage = Get-SPOSite https://tenant.sharepoint.com/sites/testsite

#Setup the site context for SPUtility SendEmail

$Ctx = New-Object Microsoft.SharePoint.Client.ClientContext($SiteURL)

$Ctx.Credentials = New-Object Microsoft.SharePoint.Client.SharePointOnlineCredentials($Cred.UserName,$Cred.Password)

 

#Setup Email

$EmailProperties = New-Object Microsoft.SharePoint.Client.Utilities.EmailProperties

$EmailProperties.From = $EmailTo

$EmailProperties.To = [String[]] $EmailTo

$EmailProperties.Subject = $Subject

$EmailProperties.Body = $SiteStorage | Convertto-html

[Microsoft.SharePoint.Client.Utilities.Utility]::SendEmail($Ctx,$EmailProperties)

$Ctx.ExecuteQuery()

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47

48

49

50

51

52

53

Import-Module Microsoft.Online.SharePoint.Powershell -DisableNameChecking

#Config Parameters

$AdminSiteURL = https://tenant-admin.sharepoint.com/

$EmailFrom =admin@tenant.onmicrosoft.com

$EmailTo = admin2@tenant.onmicrosoft.com

$Subject ="Utilities test"

$SiteURL = https://tenant.sharepoint.com/sites/testsite

#Setup Credentials and connect

$Cred = Get-Credential

Connect-SPOService -Url $AdminSiteURL -Credential $Cred

#Get site info

$SiteStorage = Get-SPOSite https://tenant.sharepoint.com/sites/testsite

#Setup the site context for SPUtility SendEmail

$Ctx = New-Object Microsoft.SharePoint.Client.ClientContext($SiteURL)

$Ctx.Credentials = New-Object Microsoft.SharePoint.Client.SharePointOnlineCredentials($Cred.UserName,$Cred.Password)

#Setup Email

$EmailProperties = New-Object Microsoft.SharePoint.Client.Utilities.EmailProperties

$EmailProperties.From = $EmailTo

$EmailProperties.To = [String[]] $EmailTo

$EmailProperties.Subject = $Subject

$EmailProperties.Body = $SiteStorage | Convertto-html

[Microsoft.SharePoint.Client.Utilities.Utility]::SendEmail($Ctx,$EmailProperties)

$Ctx.ExecuteQuery()

Enjoy!

[SPO] Remove a user from all site collections using PnP

January 12, 2024 Andrei Rachita 0

So, here goes: Remember that the UPN should always be in claims format. The script will remove the specified UPN from all SharePoint site collections […]

[SPO] Copy site pages from one Site Collection to Another

November 18, 2023 Andrei Rachita 0

OK, so out the box, SharePoint online does not offer us any possibility to copy site pages from site collection A to site collection B. […]

[PS/CSOM] List the sensitivity labels of files in a document library

August 4, 2023 Andrei Rachita 0

So, here goes:

Import-Module Microsoft.Online.SharePoint.PowerShell
Connect-SPOService -Url https://arachita1-admin.sharepoint.com

#Load SharePoint CSOM Assemblies
Add-Type -Path "C:\CSOM\Microsoft.SharePoint.Client.dll"
Add-Type -Path "C:\CSOM\Microsoft.SharePoint.Client.Runtime.dll"
      
#Config Parameters
$tenant=https://arachita1.sharepoint.com
$SiteURL= https://arachita1.sharepoint.com/sites/Luca-ListIssue
$LibraryName = "TESTLIB"
  
#Get Credentials to connect
$Cred = Get-Credential
  
Try {
    #Setup the context
    $Ctx = New-Object Microsoft.SharePoint.Client.ClientContext($SiteURL)
    $Ctx.Credentials = New-Object Microsoft.SharePoint.Client.SharePointOnlineCredentials($Cred.UserName,$Cred.Password)
      
    #Get the Web and List
    $Web = $Ctx.Web
    $Ctx.Load($Web)
    $List = $Web.Lists.GetByTitle($LibraryName)
    $Ctx.Load($List)
    $Ctx.ExecuteQuery()

    #Prepare the query
    $Query = New-Object Microsoft.SharePoint.Client.CamlQuery
    $Query.ViewXml = "@
    &lt;View Scope='RecursiveAll'&gt;
        &lt;Query&gt;
            &lt;OrderBy&gt;&lt;FieldRef Name='ID' Ascending='TRUE'/&gt;&lt;/OrderBy&gt;
        &lt;/Query&gt;
        &lt;RowLimit Paged='TRUE'&gt;2000&lt;/RowLimit&gt;
    &lt;/View&gt;"
  
    $Counter=1
    $DataCollection = @()
    #Batch Process items
    Do {
        #powershell sharepoint online list all documents
        $ListItems = $List.GetItems($Query) 
        $Ctx.Load($ListItems)
        $Ctx.ExecuteQuery()
        $Query.ListItemCollectionPosition = $ListItems.ListItemCollectionPosition

        #Iterate through each document in the library
        ForEach($ListItem in $ListItems| Where {$_.FileSystemObjectType -eq "File"})
        {
            #Display a Progress bar
            Write-Progress -Activity "Scanning Files in the Library" -Status "Collection file's Inventory '$($Item.FieldValues.FileRef)' ($Counter of $($List.ItemCount))" -PercentComplete (($Counter / $List.ItemCount) * 100)

            #Collect data        
            $DataCollection += New-Object PSObject -Property ([Ordered] @{
                FileName    = $ListItem.FieldValues["FileLeafRef"]
                RelativeURL = $ListItem.FieldValues["FileRef"]
                CreatedBy   = $ListItem.FieldValues["Created_x0020_By"]
                CreatedOn   = $ListItem.FieldValues["Created"]
                ModifiedBy  = $ListItem.FieldValues["Modified_x0020_By"]
                ModifiedOn  = $ListItem.FieldValues["Modified"]
                FileSize    = $ListItem.FieldValues["File_x0020_Size"]
            })
            $Counter++
        }
    }While($Query.ListItemCollectionPosition -ne $Null)

    #Display results
    $DataCollection 
   
}
Catch {
    write-host -f Red "Error:" $_.Exception.Message
}


foreach ($file in $DataCollection.Filename)
{

Write-Host $file
$fileurl=$SiteURL+"/"+$LibraryName+"/"+$file
get-FileSensitivityLabelInfo -FileUrl $fileurl

}

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47

48

49

50

51

52

53

54

55

56

57

58

59

60

61

62

63

64

65

66

67

68

69

70

71

72

73

74

75

76

77

78

79

80

81

82

83

84

Import-Module Microsoft.Online.SharePoint.PowerShell

Connect-SPOService -Url https://arachita1-admin.sharepoint.com

#Load SharePoint CSOM Assemblies

Add-Type -Path "C:\CSOM\Microsoft.SharePoint.Client.dll"

Add-Type -Path "C:\CSOM\Microsoft.SharePoint.Client.Runtime.dll"

#Config Parameters

$tenant=https://arachita1.sharepoint.com

$SiteURL= https://arachita1.sharepoint.com/sites/Luca-ListIssue

$LibraryName = "TESTLIB"

#Get Credentials to connect

$Cred = Get-Credential

Try {

#Setup the context

$Ctx = New-Object Microsoft.SharePoint.Client.ClientContext($SiteURL)

$Ctx.Credentials = New-Object Microsoft.SharePoint.Client.SharePointOnlineCredentials($Cred.UserName,$Cred.Password)

#Get the Web and List

$Web = $Ctx.Web

$Ctx.Load($Web)

$List = $Web.Lists.GetByTitle($LibraryName)

$Ctx.Load($List)

$Ctx.ExecuteQuery()

#Prepare the query

$Query = New-Object Microsoft.SharePoint.Client.CamlQuery

$Query.ViewXml = "@

<Query>

</Query>

</View>"

$Counter=1

$DataCollection = @()

#Batch Process items

Do {

#powershell sharepoint online list all documents

$ListItems = $List.GetItems($Query)

$Ctx.Load($ListItems)

$Ctx.ExecuteQuery()

$Query.ListItemCollectionPosition = $ListItems.ListItemCollectionPosition

#Iterate through each document in the library

ForEach($ListItem in $ListItems| Where {$_.FileSystemObjectType -eq "File"})

{

#Display a Progress bar

Write-Progress -Activity "Scanning Files in the Library" -Status "Collection file's Inventory '$($Item.FieldValues.FileRef)' ($Counter of $($List.ItemCount))" -PercentComplete (($Counter / $List.ItemCount) * 100)

#Collect data

$DataCollection += New-Object PSObject -Property ([Ordered] @{

FileName = $ListItem.FieldValues["FileLeafRef"]

RelativeURL = $ListItem.FieldValues["FileRef"]

CreatedBy = $ListItem.FieldValues["Created_x0020_By"]

CreatedOn = $ListItem.FieldValues["Created"]

ModifiedBy = $ListItem.FieldValues["Modified_x0020_By"]

ModifiedOn = $ListItem.FieldValues["Modified"]

FileSize = $ListItem.FieldValues["File_x0020_Size"]

})

$Counter++

}

}While($Query.ListItemCollectionPosition -ne $Null)

#Display results

$DataCollection

}

Catch {

write-host -f Red "Error:" $_.Exception.Message

}

foreach ($file in $DataCollection.Filename)

{

Write-Host $file

$fileurl=$SiteURL+"/"+$LibraryName+"/"+$file

get-FileSensitivityLabelInfo -FileUrl $fileurl

}

Sample output: