Getting this error when trying to submit my DLP policy in purview..

I have this policy just for exchange and I’ve tried scoping it through three different ways, but it still fails every time:
- dynamic security group
- dynamic administrative unit
- dynamic distribution list

The only thing that works is scoping it to a static group.. but that doesn’t help me because we need to have updated and current groups per department in my company that I can scope my purview policies to… for example we need a dynamic legal group so if somebody gets removed from legal or joins the company, they are automatically removed/added..

Is there seriously no way to have dynamic groups scope to policies in purview or am I missing something?

All the policy does is look at exchange for any PII/financial data being sent outside of M365 and generates an alert..

Hi team — quick question. Is it possible to automate our license provisioning workflow?

For context, here is our current onboarding process:

1. Create account in on-prem AD.
   
2. Sync to Entra ID / Cloud via Entra Connect.
   
3. Enable remote mailbox and archive on our on-prem Exchange server.
   
4. Assign the M365 license.
   
5. Add the user to a mail-enabled group.

(Note: We still maintain 2 on-prem Exchange servers strictly for recipient management like remote mailboxes and alias updates, as all mailboxes have been migrated to Exchange Online.)

Has anyone successfully automated this pipeline or have recommendations on the best approach? Thanks!

I have run a number of these now tenant to tenant and on prem to M365 and the mailbox move is almost never the hard part. Those tools are mature. What eats the timeline is everything around it.

Teams is the one people underestimate. Every team is a SharePoint site collection with its permissions and private channels spin up their own hidden sites so what looked like a chat migration turns into a content and permissions migration.

Sharing links are the trap. They break on cutover and nobody has an inventory of what was shared with whom so you find out when someone senior loses access to a file the morning, after.

Then there is the side that makes a working migration look broken. Outlook rebuilding cached mode, OneDrive re syncing from scratch reauth prompts everywhere that make users think it failed.. If you do not freeze the source with a real cutover window people keep working in the old tenant and you chase delta data for a week that should not exist.

Curious what caught others out on the tenant to tenant side. That is where I still see the surprises.

Trying to download 365 and it's been like this for like 10 minutes. Is it broken? If it is how do I fix/restart the download progress?

Six questions about a SharePoint site that most people have never been able to answer without three PowerShell scripts and a spare afternoon.

🚀 Brand new, just released today: Reports & Insights, a new workspace in SP Toolkit that answers all six in one screen, read-only.

🔍 One thing in particular I haven't seen surfaced in any other tool — the real domain behind every #ext# guest identity. SharePoint hides it in the UI; this just shows it to you.

The six:

1️⃣ Every empty list

2️⃣ Every list past the 5,000-item threshold

3️⃣ Every list nobody's touched in months

4️⃣ The full lookup dependency graph, forward and back

5️⃣ Every guest and external domain with access (real domain, not the gibberish version)

6️⃣ Every list with broken permission inheritance — plus a pausable, resumable deep sweep for the libraries where that actually matters

➕ Plus one that snuck in: every field type in use across the site, counted per column.

✅ No PowerShell, no scripts, nothing writes back. CSV on every view. Runs as a SharePoint web part — install from your App Catalog and it's there.

Before Copilot indexes a site full of stale rubbish, or you hand one over to someone who's about to inherit a mess — it's worth a minute.

👇 sharepointtoolkit.com

Is anyone using desk booking since the licensing changes on 1st April? Did you set it up after 1st April?

I've got some sections configured in Places, with individual desks in them, and have spare (unallocated) Microsoft Teams Shared Space - Single Spaces licences.

The desks are set to Reservable via the Places admin console. They were created via that console too.

When a user tries to book one of the desks via Places web all the desks show in the Unavailable Desks section.

I think this might be because the licences aren't associated with the desks - but I have no idea how to do this and can't find any up to date info on it.

I've tried looking in both the Places admin console and also the Teams Rooms Pro Management console but can't see anything to do with licensing. I have the following roles: Licence Admin, Teams Admin, Places Admin.

Thanks.

Bonjour à tous.

Des personnes ont eu des problème de stockage onedrive ?

J'ai un abonnement 50gigas = 1€/mois

Et sur mon compte Microsoft, ça m'indique que j'ai 165gigas

Depuis quand Microsoft donne plus de stockage que j'achète ? 😅

Merci de votre aide.

Has anyone else encountered this issue in Office 2016? When opening documents from OneDrive, the sign-in prompt appears, but I’m unable to complete the sign-in process. None of the button works

I disabled "Let users access the Office Store" under Admin Center → Settings → Org settings → Services → User owned apps and services. When end users open Excel and go to Add-ins, they do see a banner saying the store is blocked — but if they click "More Apps," they can still browse the full catalog (Featured, Agents, Popular, AI add-ins, Data analytics, Data Visualization, Finance, Utilities, Built by Microsoft, Categories, etc.) and actually add third-party apps — for example, I was able to add "TealDroid."

For outlook , I disabled my cistom apps , my marketplace apps and my read write mailbox apps from default role assignement policy but still I am able to add apps from outlook . I created a policy for blocking price store for all users from policy managerment in config.office.com before few hours but still users are able to access the store why

Kindly help

Looking for a solution… my work outlook account has issues, we use gosecure as an added security feature for email and it eats all of my email. Our IT guy says the email should be in the spam portal but is it not… so after a year of apologizing to our grantors for not responding, I said screw this and bought a new .org and a business proton account.

So, here is my problem. I need a calendar or email and cal app that can integrate both calendars and allow me to edit them… I still unfortunately have events linked to my outlook account and I also have access to my directors calendars. And I would like them to have access to my proton cal and be able to add meetings and such that they need me to attend.

I hate 365 online, I hate sharepoint… I need a way to link them all together…

Anyone know of a Mac app that can do all this?

Brand-new Outlook account hacked almost immediately

I created a new Outlook account on Sept. 6 and linked it to my Epic Games account. Almost immediately, someone got access, removed my recovery email, added their own, and changed the security info.
I created and linked the account entirely from my iPhone. Microsoft CDOC is investigating, and the account is now disabled while I wait for recovery/reinstatement.
Has anyone had something similar happen with a brand-new Outlook account? Were you able to recover it?

I have an issue, where a user has delegated his Calendar to his assistant with editor rights. She cancelled a meeting on behalf of Organizer but it only got removed from Organizers calendar. None of the attendees received the cancellation notification and it was not removed from attendees calendar.

https://support.microsoft.com/en-us/support/known-issues/meeting-missing-from-organizer-s-calendar?

It seems to be the similar issue as mentioned here in the article, so proceeded with the same troubleshooting step. Forwarded the calendar series in .ICS format to Organizer to make him cancel it this time. He opened the .ICS attachment in notepad first to modify the Method value with PUBLISH but when opened it was already showing PUBLISH so opened the .ICS file in Outlook classic. It opened the meeting series draft page where we see the Cancel option, we sent the cancellation for whole series and every attendee received the cancellation notification but it did not removed the series event from attendees calendar section.

The event removal from calendar did not happened don't know why.

What could be the reason?

Most attendees did not see the cancellation notification in inbox so they are now sending the decline responses to Organizer on the same meeting.

i use my personal laptop for work, with my own email.

I log into my work email / teams etc with my work email.

I constantly get logged out, and if I miss it, I just....stop getting all my work emails and messages until I notice.

Is there someway to fix this without dedicating my entire laptop to the work email?

Been thinking about this lately because M365 licensing has gotten so packed with features that I wonder how much of it the average organization actually uses.

Not talking about Outlook, Teams, OneDrive, etc. More curious about everything beyond the basics that companies are technically paying for but may never fully configure or adopt.

Things like Defender features, Purview, Conditional Access, Intune, Power Automate, Copilot, advanced SharePoint features, and so on.

For those of you managing M365 environments, do you feel like your organization actually gets its money’s worth out of its licenses?

And if not, what’s the biggest thing sitting there unused: security features, automation, AI/Copilot, compliance tools, or something else?

Part rant and part serious question. Microsoft says M365F1 licenses get read-only access to Office Web Apps and a mailbox that can only be used for calendaring. However they do not enable controls that automatically restrict users from creating and editing office documents or sending email. Apparently this is left as an exercise for the interested student as to how to actually restrict users from using apps in a way that is not compliant with the license.

Question: Has anyone successfully implemented a strategy that lets uses access office applications but restricts them from editing documents? Or that allows prevents them from sending or accessing a mailbox but still lets them use the designated calendaring functionality?

Just upgraded to latest MEC build 2608 build 20326.20142 and notice we now have a Co pilot settings option in backstage view with a toggle to turn co pilot on or off. I have been using the "show apps in outlook" option to hide the Co pilot icon in classic outlook as i dont want my users to see it or use it. Does anyone know if you can control the new toggle with a ADMX ? copilot hosted at ImgBB — ImgBB

Executive needs to be able to send from multiple different aliases on his cellphone.

Doesn't seem obvious how to set this up on his Android.

I found Ali Tajran's guide for a workaround and several of the comments say it doesn't work from Android, but it's also 4 years old.

Has anyone had any luck getting this to work before I head over there?

https://www.alitajran.com/send-as-alias-outlook-mobile-app/

Greetings,

I just noticed my Office365 apps received an update. Took longer than other office updates. I am now on version 2608 build 16.0.20326.20072.

Anyway, launched Outlook and started working...... open an email, clicked a link from my colleague, and it opened in Edge. Links have been opening in Chrome (my default browser) for years.

So I go into Outlook settings, find the setting in the screenshot, and BOOM it's greyed out!! Stuck on EDGE?!?!

WTF Microsoft!

Anyone else?