I'm curious what other organizations struggle with most.

In the environments I've worked with, the biggest challenges aren't authentication or MFA anymore. It's governance after access has already been granted.

Things like:

• Nobody knows who owns an application.
• Hundreds of security groups with no clear purpose.
• Access reviews only happen before an audit.
• Standing privileged access that nobody questions anymore.
• Employees not knowing what they can actually request.

If you could change one thing about Microsoft Entra Governance tomorrow, what would it be?

A new DLP rule is available to control sharing of SharePoint and OneDrive files with selected domains and email addresses. The new rule supports an allow list (permit sharing) and can also specify a deny list (block sharing). The user interface takes a little getting used to, but when everything is configured and SharePoint has had a chance to respond to the block, the rule works and any attempt by a blocked user to use a sharing link is refused.

https://office365itpros.com/2026/07/22/block-sharing-dlp-sharepoint/

Regarding Microsoft Teams, is there a method to restrict attachment sharing to a specific external domain, rather than enabling it for all external users?

I have attempted PowerShell scripts, but these have universally enabled the functionality. Your guidance on this matter would be greatly appreciated.

Hi everyone,
I’m currently working on a SharePoint migration for my organization. We need to migrate a large number of SharePoint Online sites from one Microsoft 365 tenant to another.
This is the first time I’m handling a migration on this scale, so just wanted to know how other people have done it in a real production environment.
If anyone has done a large SharePoint tenant to tenant migration, how was your experience? Did you face any major issues during the migration? Did you go with Microsoft’s native method or use some other solution?

This sounds so stupid I'm ashamed to post it. But at our non-profit, I had previously configured several rooms anyone could edit. Works fine. Now I go to make a new shared calendar and no one can see it, and the options I remember from the previous configuration are not there. I remember some settings to be sure anyone could make a meeting or reserve a time, but I don't see them at all.

Is it different or am I just nuts? Microsoft 365 help is no help..

We’re implementing Microsoft Purview for a large enterprise with approximately 3,600 endpoints. The organization currently has no sensitivity labels in place, but we need to roll out Purview policies (DLP, information protection, etc.).

My current thinking is:
Define the label taxonomy first.
Pilot with 10 users.
Expand to around 150 pilot users.
Roll out organization-wide.
Start with manual sensitivity labelling so users become familiar with the labels.
Introduce automatic labelling after the manual phase.
My concern is that users may apply incorrect labels during the manual phase, which could affect policy effectiveness.

Would it be better to:
Start with manual labelling and transition to auto-labelling?
Introduce auto-labelling much earlier?
Or use a hybrid approach from the beginning?
For those who have deployed Purview at enterprise scale, what rollout strategy worked best, and what would you do differently if you were starting again?

Hello all, hope someone can advise here as I seem to have caused some licensing issues after defederating from GoDaddy.

We want to be in a place where we are paying monthly for however many licenses we use and are only tied to a 1 month subscription.

I defederated from GoDaddy and removed their GDAP permissions, they are still showing as our reseller in the admin portal.

I went to purchase the licenses direct from MS and in the "Purchase Services" bit of the admin center there was the option to chose between either MCA Billing account or MOSA billing account.

I chose MOSA and went through the whole process to buy the licenses but it kept failing so I went back and chose MCA instead.

I'm getting confused as under "Billing Accounts" in the admin portal I can only see the MOSA account.

Under "Your Products" I can switch between MOSA and MCA account, the MOSA account shows Business Standard licenses with an expiry of next year which would be a year term. The MCA account shows M365BS licenses with expiry of september this year.

I've not cancelled anything in GoDaddy yet and I'm just wondering if anyone can help me get the billing in order on Microsoft's end before I do.

Well, I started working last year as a backend Executive operation. I wanted to shift my career into an ERP functional consultant in D365 f&o every time I start to prepare or learn something or other happens lack of motivation, focus and anxiety,stress.

Need suggestions from you community on how I need to prepare for an interview based on the concepts or else I need full on hands-on practice.

Few steps or suggestions would really help full for me.

Hoping for best.

Had a few machines in a test patch group be upgraded to version 2606 and checking Account/About it now shows as monthly enterprise channel. On these machines the M365 apps install was installed using the Semi annual channel. I found https://learn.microsoft.com/en-us/microsoft-365-apps/updates/unified-update-channels which suggests the SAC channel is being merged into MEC but i was under the impression it was only for new installs for example you cant select that channel when building a configuration.xml. The update from SAC to MEC is causing us issues as part of the update its also updating the C++ 2015-2022

A user assigned managed identity (UAMI) is a secure method to authenticate with many important endpoints, including the Microsoft Graph. It’s like a system assigned managed identity (SAMI), but the big difference is that a UAMI is an Azure resource that isn’t tied to an automation account. It can be used in multiple areas of Azure and a UAMI might be a better option for large organizations that make extensive use of Azure resources.

https://office365itpros.com/2026/07/20/user-assigned-managed-identity/

Looking for recommendations for tenant to tenant migration tools. Peeling out approx 10 email addresses and 2 domains from tenant a to tenant b.

I’m at my wit’s end and could use advice from anyone who’s been through this.

What happened:
About 6 months ago my Microsoft account (used mainly for Xbox) was hacked. The hacker changed the primary email alias from my Gmail to a throwaway Russian address (a bacteriomail.ru domain — an email I’ve obviously never owned). While the account was under their control, they did something that got the account permanently suspended for “Abuse of our Platform and Services.”
So to be clear: I got hacked, and then I got punished for what the hacker did. Years of purchased games, DLC, my gamertag, achievements — all gone.

What I’ve tried:

• Submitted the official Case Review / appeal. Result: “Violation confirmed (Decision upheld).” No request for evidence, no questions asked, ticket closed.

• Appealed repeatedly over ~6 months. Every reply is a template. Nobody has ever asked me for proof of the hack, even though I’ve offered it.

• Explained the account was compromised in a new ticket. The latest reply from CDOC Case Management says they “cannot locate the account” and that it may have “expired due to inactivity” — which is a canned Hotmail-era template that doesn’t even apply. The account exists; it’s just under the hacker’s email alias now because THEY CHANGED IT.

I told support to search the current alias or my gamertag. Ticket closed anyway.
Evidence I have:
• Years of Microsoft purchase receipts sent to my original Gmail
• The account’s alias was changed to a disposable .ru email — no legitimate user does this
• [If you find them: security alert emails from Microsoft showing the alias/password change with timestamps]

My questions:
1. Has anyone here actually recovered a banned account after proving it was hacked? What worked?
2. Is there any way to reach Microsoft’s account compromise team directly instead of the CDOC template queue?
3. Did the BBB or Notice of Dispute route work for anyone?
Any advice appreciated. I’m not trying to dodge a ban I earned — I just want someone at Microsoft to actually look at the sign-in logs, which would show everything.

We are a small startup that has an existing Entra/M365 subscription/tenant with a connected domain & a few (busy!) M365 business basic subscriptions/mailboxes.

We're fortunate to have been accepted into the Microsoft for Startups program & now have access to inclusive M365 Professional licenses within that subscription, however they're tied to the MS Personal account / tenant that had to be used to create the MS for startups account.

I can't for the life of me figure out the best way for us to take advantage of these license other than to do a full domain/mailbox migration from our current tenant to the newly deployed tenant but this is more disruptive than I'd prefer to deal with at this stage as I really want to avoid interrupting email flow.

Also, part of our solution is app-based with end-user authentication so fundamentally I know we're going to want to us an external Entra ID tenant, so "merging" tenants at this point feels counter-intuitive.

Any high-level advice/pointers would be very appreciated!

Hi folks!

I have a question, how do you manage to keep up with ms356 environment update and news ? I'm sayin' this because yesterday we had an issue with OneDrive because we've missed one notification dating back in March about B2B collaboration rollout.

We did setup a planner with sync from message center but there is a lot of messages and the way they"re written is sometime difficult to quickly understand if we"re affected or not by a change and is in general too verbose to have all people wîling to read them systematically.

Any other tool or process ?

Thanks

How is it I am being billed per month for MicroSoft 365 Business, but when I go to my account, there are no subscriptions or even payments linked? I have tried for the last two hours to talk to a human in billing to no avail. All the numbers to support tell me I have to go to a link aka.ms/mac365 which is no help at all. I finally got someone on chat and they tell me they can't help me because it's "365 business" and have me the support numbers...which sent me back to that link. I'm going in circles and am about to lose my mind!

I tried MicroSoft forum but after 20 minutes of setting up as a user, it give me no option to post a questions. This is why I am here.

I suspect there may be another MicroSoft account that I am unaware of that used to set up this business account. We only have one email address so I cannot imagine what it would've been.

Does anyone know how I can get help?