IT Services Reference
Powered by

Teams Management operating notes

In 

Look up the recorded Teams Management host, invocation, certificate and schedule details. The notes include manual-run exceptions and an interrupted Hope workflow; they do not establish the service's current operating state.

Script Location

Currently setup on a VM at Groves called CCM-DEV-VM01 (172.16.8.8)

The source records the server credentials in the author's Bitwarden. The current vault access and operating owner are not established here; no credential is included.

The server is not on the Groves domain so the username for RDP needs to be "CCM-DEV-VM01\username".

The Teams Group/Class Management Script

- is run by scheduled task that runs a custom powershell command.

  • processes all CCM schools that have an Edumate tenant.
  • LIVE RUN: The command run when ready to make changes to M365 pwsh.exe -WindowStyle Hidden -command "Update-TeamsManagerApp -quiet -noreturn"
  • TEST RUN: See Test Run of the Script

Update-TeamsManagerApp is the function that kicks off the whole process. Update-TeamsManagerApp -quiet -noreturn About the parameters:

  • -noreturn causes the function to return no data to console when the script run.
  • -quiet minimises the amount of information that is display on the console.

Entra App Cert for Teams Mgn App

The script connects to M365 using an Entra App with certificate based authentication.

Each device the script uses has it's own certificate.

Entra App Basics: Enterprise App vs Registered App Powershell scripts can sign in to M365 with a Service Principal Id (that looks like a M365 UserId) and works like a user account with a very secure login method that allows the script to run without user intervention. The notes describe using the Entra enterprise app to limit the service principal's permissions. General info about Entra Enterprise/Registered Apps can be found here SUMMARY TABLE OF Entra Enterprise Apps Vs Registered Apps.

The Schedule

The scheduled task is called "Teams Mgn Script" It can be found in Task Scheduler

Screenshot retained for review

The source records a weekday schedule of 7 am and 11 am, but also says the author was running it manually at the start of the year. Neither the schedule nor actual current operation has been confirmed.

Screenshot retained for review

HopeCC work around

The source describes a workaround for Hope, which did not have an Edumate tenant in the captured notes: Hope's Script Managed Teams. The source reports that this ran in 2025 but was not maintained in 2026, when a move to WONDE was anticipated.

The recorded Hope CSV variant uses the same command with -includeHOPE pwsh.exe -WindowStyle Hidden -command "Update-TeamsManagerApp -quiet -noreturn -includeHOPE"