A new DLP rule is available to control sharing of SharePoint and OneDrive files with selected domains and email addresses. The new rule supports an allow list (permit sharing) and can also specify a deny list (block sharing). The user interface takes a little getting used to, but when everything is configured and SharePoint has had a chance to respond to the block, the rule works and any attempt by a blocked user to use a sharing link is refused.

https://office365itpros.com/2026/07/22/block-sharing-dlp-sharepoint/

I'm curious what other organizations struggle with most.

In the environments I've worked with, the biggest challenges aren't authentication or MFA anymore. It's governance after access has already been granted.

Things like:

• Nobody knows who owns an application.
• Hundreds of security groups with no clear purpose.
• Access reviews only happen before an audit.
• Standing privileged access that nobody questions anymore.
• Employees not knowing what they can actually request.

If you could change one thing about Microsoft Entra Governance tomorrow, what would it be?

Regarding Microsoft Teams, is there a method to restrict attachment sharing to a specific external domain, rather than enabling it for all external users?

I have attempted PowerShell scripts, but these have universally enabled the functionality. Your guidance on this matter would be greatly appreciated.

This sounds so stupid I'm ashamed to post it. But at our non-profit, I had previously configured several rooms anyone could edit. Works fine. Now I go to make a new shared calendar and no one can see it, and the options I remember from the previous configuration are not there. I remember some settings to be sure anyone could make a meeting or reserve a time, but I don't see them at all.

Is it different or am I just nuts? Microsoft 365 help is no help..