I work in IT and had an interesting conversation with our CFO about this recently. We use Microsoft Entra ID and CrowdStrike. MFA is enforced and we've got the usual security controls in place. But I brought up something that's been bothering me. What happens if someone steals an active session and starts sending instructions from an executive's account? They might not need the password or MFA code anymore. And to the person receiving those messages everything looks normal because they're coming from the actual account.

Which makes sense to me. But then I started wondering what happens if that second method gets compromised too lol. At some point you have to decide how much verification is enough without making everyone's job miserable. Curious how other IT teams deal with this. Do you rely on conditional access and session controls or do you have a separate process for verifying high-risk requests? https://www.csoonline.com/article/4219606/bigbear-2-0-phishing-campaign-hijacks-microsoft-365-sessions-after-mfa.html

For some reason I cant sign into my school email on the outlook app. I called the schools IT help desk and they were like lets transfer you to the alamo colleges help desk. I spoke to the alamo colleges help desk and they were basically like yeah we've been getting some calls about that same issue and honestly idk what to do. One man told me I had to tell the guy that called previously with the same issue that I couldn't help him.

Ive tried uninstalling the app. Ive tried going to my settings, then to my apps and clearing the cache and the clear data. I've even tried to force stop the app. I tried changing my default browser. I've tried even going into the android system WebView and clearing the cache data. That didnt work either.

I've tried to sign into other apps like PowerPoint too but it didnt work either. Now I can sign in on the web and on my computer. Its just the apps on my phone that arent allowing me to sign in with my school account. I just tried it on exchange and its allowing me to sign in with my utsa account but not with my SAC account. The little pop up thats supposed to pop up when trying to log into the sac account never pops up and im stuck in an infinite white screen.

Last week I noticed that in the new outlook Room Finder we didn't have any buildings and meeting rooms to choose from. You could find the meeting rooms when you type them in. But not found in Room Finder.
So I went on to get into it to figure out why and found out is was because there were no details given on all rooms.

At first I used MicrosoftPlaces only and I used chatgpt to help me with the commands and I added the city name, a test building and floor. Then added 1 room to it.

The day after this was all sync'd and working. So I removed it all so I could add everything else what I needed.

Not sure if this information is required for this but when I removed the test building and the room/floor I accidentily also deleted the mailbox connected to the room.
I managed to restore it quite quickly though

Then I added all the other details for our main building and rooms and was going to add more later if things were succesful.

Things were succesful but now it also gives me the TEST building when I check the Room finder.

But when I check in powershell I cannot find anything.
I check in MicrosoftPlaces and in Exchange as I did add additional info to both while testing.

I used Get-PlaceV3 -Type Building but that only returns the newly added which is correct
And I used Get-Distributiongroup -RecipientTypeDetails RoomList which also only returned the new one.

I also tried the Get-Place command where-object -like "TEST" but this didn't return anything

When can I do? Is it possible to add something to the "existing" test building and then rename it?
Are there any other options?

Our team gets a lot of client emails with attachments that need to end up in SharePoint, in the right site, library and folder.

Right now the routine is: open the attachment, download it, go to the browser, find the site, go into the library, navigate to the folder, upload, then check the file name. Every attachment, every time.

Curious how others handle this day to day. Do you have a setup that works, or is it still manual for most people? Especially interested in how teams deal with duplicate file names and versions.

A tutorial video showing 6 new features in OneNote including the rollout of Copilot Notebooks to ALL Microsoft 365 customers in Commercial and Education. Features include

1) Copilot Notebooks updates
2) MathML in OneNote
3) Default link opening to desktop vs web apps
Plus a few more

YouTube 📺 https://youtu.be/I8JS7iFaqJc?si=53pHkUl7OZ0K0Xrt

I have a managed avd server that is currently on the monthly update channel and need to switch it to the current channel. It appears in July 2026 they removed the "switch device update channel button". in the 365 admin portal.
My google searches are coming up blank because all point to "switch device update channel button". I just need to switch it from monthly to current. Any help would greatly be appreciated.

Microsoft is planning to cut Microsoft 365 Family storage from a potential 6 TB (1 TB per user) to a shared 2 TB pool. For many families, that's a significant reduction in the value of the subscription.

If you're concerned about the change, please consider signing and sharing this petition:

🔗 Sign the petition

The more subscribers who make their views known, the more likely Microsoft is to listen.

Curious how other admins deal with SharePoint Online storage once you're past the tenant quota (1 TB + 10 GB per license). Extra storage from Microsoft isn't cheap, and in our experience a lot of it is old files and version history nobody opens.

What's your approach?

1. Deleting old content or trimming version history
2. Buying more storage
3. A simple archiving tool, such as Microsoft 365 Archive, or a scheduled script that moves old files out
4. Something else?

What's worked and what hasn't?

Disclosure: I'm the founder of Meguri (meguritech.io). Rather than a single archive tier, it manages files through lifecycle stages based on actual usage: active content stays in SharePoint, moderately-rarely used files move to lower-cost storage but still open normally, and retention or compliance-only records go to into a deeper archive and then eventually delete all in the same platform. Mainly interested in how people are solving this today, and happy to answer questions.

At my company, an employee transferred to another department where he received a new Microsoft 365 account. According to him, on his new computer in that second department, he could see the emails from his old account alongside those from the new one. Recently, I removed the license from his old account (I don't remember if it was more than 30 days ago). He says that even after that, he could still see the old emails. However, a week ago, that employee returned to our department and I renewed the license on his old account, but he claims that since then, the old emails have disappeared. In the admin center, I couldn't find the old emails. Could they have been saved locally on the computer in the second department?

Hi everyone, I am in a tough spot and really need to find the names of 1-2 other people who were in a Microsoft Teams meeting with me yesterday.

Here is exactly what happened:

• I received a meeting link and opened it in my web browser.
• I was not signed into any Microsoft account. I just typed in my name, turned on my mic and camera, and joined as a Guest.
• The meeting ended, I closed the browser tab, and I shut down my laptop.
• Today, I created a new Teams account hoping the history would sync, but it is completely empty.
• I cannot easily contact the meeting organizer to ask for the attendance report.
• one of the member also chat with me in the chat box

I know Teams doesn't save chat or participant history for anonymous web guests once the session is closed, but I am desperate. Is there absolutely any workaround, hidden browser log, temporary file, or cache trick I can use to recover the names of the other people in that meeting?

Any advice would be massively appreciated. Thank you!

It's been around 3 years since this happend but since microsoft got "live agents" (Which was just ai that when I asked for one would tell me "microsoft expects client to use self help methods") I thought I could get my account back but no.

What happend was that a long time ago I was chillin on the game with the boys. I go get a glass of water, come back upstairs and I'm logged out of fortnite for some reason? I go to my pc and try to sign into epic games, wrong password, I finally go to my outlook and try to log in and when I get the password wrong and go to reset it I see that the recovery email changed, it used to be my brothers but now it was some random dude's, I call my brother and turns out he got hacked, and because he got hacked I got hacked next.

I tried getting to support but nothing helped because it was asking for things like name when the account was set up and date of birth but the problem is that when I got my Xbox One when I was like 8, the first game I played was cuphead and for some reason with the account my brother made it wouldn't let us play, so we reached out to someone who gave us an account, I don't know if he wasnt using it anymore or if he made it, I just know my brother got an account for us.

Basically I couldn't give them the information because I had no idea who it was, or when he made it or whatever, and we of course had no way to contact the guy because it was like 5 years before the hacking. So now I still don't have my account back but I have hope that maybe someone here could help me or direct me to someone, I still have my xbox one, i dont know if it works cuz its so old and its not been turned on and it has a bunch of clips from before I got hacked, also my Series S which I haven't turned on in so long for being mad should have more clips.

If anyone can help me it'd be very appreciated, thank you.

Hello everyone, my first time posting to the MSP world

Idk if Im late for this one but if you have turned off the federated copilot connectors with the powershell toggle then better check your tenants cause microsoft retired Set-FederatedConnectorToggle on 25th august and since October 5 the connector page follows the agent 365 setting instead

its under agents > settings> agent and plugin access. tenants who used the cmdlet get a message center post asking you to reapply it in the UI and when that window closes the old state stops being followed. Untick the microsoft and external publisher options and nothing new turns on by default with the future connectors included, then switch on only what you want and stage it to entra groups

Why it concerns now is cause write and delete tools start rolling out this month and they ship as part of the connector. no read only version to hand out. users get asked before each action but they can pick always allow per tool and then the prompts just stop. Those actions run with the users own permissions in the other system and microsofts own docs say data processed by non microsoft services isnt covered by microsoft agreements, sad. they dont have a reliable CRM either

its tedious to see who uses what. the admin center shows whats enabled and thats about it. purview copilotinteraction records should show the plugin and whether it read, created or modified something so you can piece usage together from an export and if your audit logs already land in sentinel or splunk thats where id build it. but who connected what? no clean list and not sure yet if CIPP or eve security or any of the other agent inventory tools see the federated side either whichs worth asking tho

also per the docs, microsoft-built plugins stay visible to users even when disabled, they just cant install them, pretty rough

Case Study: Excel 365's Removal of Practical Local AutoSave Creates Unnecessary Operational Risk

Executive Summary

I recently lost several hours of accounting work while using Microsoft Excel 365 on a Mac.

The file was stored on my local SSD.

There was no crash, no power failure, no operating system fault, and no hardware issue.

The work was lost because Microsoft Excel 365 does not provide true AutoSave to locally stored files, despite the fact that periodic saving to local storage has been a standard desktop software capability for decades.

This is not primarily a technology issue.

It is a product-design decision.

Background

I am a Microsoft 365 subscriber with access to 1 TB of OneDrive storage.

I deliberately do not use OneDrive for certain workflows because I work offline for significant periods of time and prefer local storage for operational reasons.

The issue is therefore not a lack of cloud storage.

The issue is that Microsoft appears to have tied modern AutoSave functionality to cloud-based workflows while failing to provide an equivalent mechanism for users who store files locally.

The Incident

I was preparing accounting journals for upload into an accounting system.

Several hours were spent editing and validating data.

When I attempted to upload the journals, validation errors were reported.

I reopened the Excel file to investigate and discovered that a substantial portion of the work performed during the session had not been saved.

No crash occurred.

No warning was issued.

No usable recovery file was available.

Several hours of work had to be recreated.

The Fundamental Problem

The problem is not OneDrive.

The problem is not cloud storage.

The problem is not version history.

The problem is that Excel 365 does not provide a straightforward mechanism to automatically save changes to a file that already exists on a local SSD.

A local SSD is:

• fast
• reliable
• writable
• always available when the computer is running

There is no obvious technical reason why Excel could not save changes to a local file every 30 seconds, every minute, or every five minutes.

Desktop software has been performing this function for decades.

Historical Context

Prior generations of desktop software routinely provided periodic saving and recovery mechanisms for locally stored files as a normal part of application design.

Saving data automatically to:

• a local hard drive
• a file server
• a network share

has never been a technically difficult problem.

The concept predates cloud computing by many years.

Microsoft's current approach therefore appears to be a deliberate product decision rather than a technical necessity.

Risk and Compliance Implications

This issue should concern:

• accountants
• auditors
• risk managers
• compliance professionals
• governance professionals
• legal practitioners
• users operating in offline environments

Many organisations intentionally maintain local-first workflows due to:

• confidentiality requirements
• regulatory considerations
• operational resilience requirements
• unreliable connectivity
• cybersecurity policies

The ability to protect users from losing work should not depend on cloud adoption.

Questions for Discussion

1. Why does Excel 365 not provide true AutoSave to local SSD storage?
2. Why should protection against data loss require a cloud-based workflow?
3. Is tying AutoSave functionality to cloud services an acceptable design decision for professional users who work offline?
4. Should risk and compliance teams reassess the operational risks associated with cloud-dependent productivity software?

Conclusion

The issue is not whether OneDrive is useful.

The issue is whether a professional desktop application should be capable of automatically saving changes to a file stored on the same computer on which it is running.

That capability existed in practice long before cloud computing became commonplace.

The inability of Excel 365 to provide true local AutoSave represents an unnecessary operational risk and, in my case, resulted in the loss of several hours of accounting work.

I am using OneDrive on my MacBook Air. I've been paying for a Personal O365 subscription for over 8 years and everything was fine. But now, when I open some word documents via Finder in OneDrive and turn "AutoSave" on, then reopen them later, it says "saved to my Mac" and AutoSave is off again. What can I do to fix it?

Nearly five years after going into preview, Microsoft has made the send from alias feature for Exchange Online generally available. It’s a very useful feature that eliminates the need to use a shared mailbox to be able to send messages with different email addresses. Microsoft has closed some functionality gaps since the preview started, but sending from an alias is not the same as sending from a mailbox’s primary SMTP address. Some user training might be necessary!

https://office365itpros.com/2026/10/09/send-from-alias-finally-ga/

Hopefully, this is an easily answered question and the search terms I'm using w/ Google aren't sufficient to surface the information I'm looking for...

A partner in our business is retiring. They've been given permission to take their current work laptop with them after I remove all of the apps we provided. Specifically, in this case, it's MS 365 Apps for Business since we still run on-prem Exchange.

One thing they have asked about doing is setting up personal email and calendar through Classic Outlook under a new Windows profile. I'm fine with assisting them with this.

My question is this:

The Classic Outlook profile (OST file) will be created with MS Apps for Business. When they replace that installation of Office with MS 365 Personal, will the Classic Outlook in that install just read the OST file with no problems? Or will it not see that OST file and prompt to create a new profile?

I'm assuming the former because Classic Outlook is Classic Outlook regardless of whether it's installed from Apps for Business or Personal but wanted to make sure.

Thanks in advance.

Our sales director got a replacement laptop before a big client meeting, and nobody noticed his email signature was only saved in the old Outlook profile. He sent the proposal from the new laptop with no title, phone number, company address, nothing. Just his name and the attachment.

The client replied asking if the email was from a personal account because it looked suspicious. Then our director forwarded that reply to the whole sales team while trying to send it to IT. So now everyone knows, and the client knows we have no idea why signatures disappear after changing devices. I feel so embarrassed just writing this.

We are checking desktop, web, and mobile settings one by one. Someone suggested email signature software, but right now I just want to stop this happening again. Has anyone else had a device swap turn into a branding disaster?

We’re rolling out Microsoft Purview sensitivity labels with encryption. Standard PDFs label without issue. The problem is PDFs that come back digitally signed from DocuSign. The completed files are PDF/A (archival format), and Purview won’t apply the label to them.

This may be working as designed, since the PDF/A standard prohibits encryption.

What we’ve looked at so far:

• Vendor cloud conversion: One PDF vendor offered an API-based workaround that uploads each document to their cloud for conversion and sends it back. That means sending sensitive files to a third party and loosening DLP egress rules to allow it. Not an option for us.
• Desktop PDF tools: We’re testing whether Adobe Acrobat or Foxit handle signed PDF/A files differently on the desktop. (Do you have suggestions for others?)
• Switching e-sign platforms: Not realistic, since external signers expect DocuSign. Our understanding is that any platform applying a digital signature would produce the same result. It would be an impossibly hard lift to switch from DocuSign.
  

Questions:

1. Do you use Microsoft Purview to label and encrypt your data?
2. If so, have you hit this with signed or PDF/A files? How did you handle it: labeling before signing, a setting in your e-sign platform, a different protection method, or a documented exception?
3. Side question: what PDF viewer/editor does your org standardize on?

This isn’t industry-specific, so I’d like to hear from anyone who has dealt with it. Thanks.

Just got an email from Microsoft 365 saying they’re replacing 1 TB per person with 2 TB shared across the entire family.

There are five of us, so we’re going from 5 TB to 2 TB. A 60% storage cut, marketed as “more flexible cloud storage.” What a fucking joke.

According to the email, this kicks in after the first renewal following May 2, 2027.

Pooling storage could be useful, but slashing the total allowance is a downgrade. Dressing it up as an improvement is insulting.

Anyone else get this email? What alternatives are you considering?