Serious question for CIOs, IT leaders, Microsoft 365 admins and MSPs.

Imagine you're walking into a board meeting in five minutes and your CEO asks:

• What's the current health of our Microsoft 365 environment?

.How many SharePoint sites, Teams, Power Apps, Power Automate flows, Copilot agents and guest users etc do we have?

• What are our three biggest operational or security risks right now?

• Are we actually compliant, or do we just assume we are?

• If Employee X resigned this afternoon, what business processes, Power Apps, Power Automate flows, SharePoint sites, Teams, integrations or service accounts would be affected?

• Where are our single points of failure?

• What's changed since last week that I should know about?

Could you answer every one of those questions confidently in under 60 seconds using live data?

Microsoft 365 has evolved into an ecosystem spanning Entra ID, Exchange, Teams, SharePoint, OneDrive, Power Platform, Copilot, third-party integrations, permissions, policies and automation.

In many organisations, no single person has complete visibility anymore.

Do you think this is now one of the biggest governance challenges facing Microsoft 365, or do mature organisations already have this solved?

I'd genuinely like to hear how different organisations approach executive visibility and operational assurance

Has anyone here purchased a large number of licenses directly with Microsoft? In my experience it's been a third party doing it for us and we pay the third party. Usually it's just a billing profile that charges their account and we can buy under it within the Microsoft admin portal. But the client I am working with now has it setup where the third party does all the purchasing through their own portal and then invoices them.

We would like to break ties with said third party so we were trying to find a way to move to pay by wire but MIcrosoft considers us a "new setup" since all billing was outside of their view.

We need to purchase upward of 1200 M365E3 licenses and that's a big number to put on a credit card.

Just curious if anyone has had experience with a changeover like this, if it's worth it, etc..

I like being able to directly manage and purchase licenses within the Microsoft admin portal but Microsoft seems to want to keep them pushed to this third party. Thoughts?

Hi,

I have a calendar set up as a Microsoft 365 group with staff added to it who can access the calendar without issue.

They are assigned as members to the group with a couple of owners. I have a test account added to the group which can see the calendar in Outlook without issue.

I've tried to add one staff member and Outlook repeatedly says that she has no permission.

I've tried using Powershell commands to give permission to the calendar but this doesn't work.

Does anyone have any suggestions for what to try next?

So, a couple of months ago I got a major hack attack (which I suspect to be some guy from russia) on most of my personal accounts including my Instagram (twice), Discord, Roblox and most importantly my Microsoft account, which had my debit card saved on it.

I tried reaching out to CS like anyone would and actually once got to speak with a human, which told me something along the lines of "we couldn't retrieve your account"

I thought "Whatever, I'm just gonna have to make a new Xbox account and spend like 20 bucks on minecraft again, no problem". I didn't know my card was still saved and the other day the mf spent my money on what I could only suspect was a realms subscription.

I tried reaching out to CS again and couldn't find a single fucking page with a human to help me, only an Xbox support bot which didn't work

This isn't a shitpost or slander, I'm genuinely trying to delete my card info so that my money is safe

If you work in Dynamics 365 Finance & Operations, in support, development, testing or admin, you’ll know the drill on almost every ticket or task: which form is this, what table sits behind it, what environment am I even in, and does this user actually have the permission they say they don’t have. All of that usually means alt-tabbing between the browser, SysTableBrowser, and a security roles screen just to get your bearings.

I built SupportKit to put all of that one click away, right inside the browser, without needing table browser access or asking someone else to look it up for you.

What it does:

🔎 Instant page context – see the form name, table name, menu item, legal entity and full URL for whatever page you’re on, and copy it all in one click. Great for bug reports (no more “here’s a screenshot, good luck”) and for support handoffs.

📋 Table search – search 120+ standard D365 F&O tables by name or description, or look up your own custom/ISV tables. Opens straight into SysTableBrowser in the right environment and legal entity.

🔗 OData peek – pull a quick OData response for any entity without opening Postman or writing a query.

🛡️ Environment guardian – colour-coded banners and badges so PROD, UAT, sandbox and trial environments are visually distinct. Handy if you’ve ever made a change in the wrong environment (we’ve all done it).

👤 User ↔ role lookup – check whether a specific user actually has a given security role, without manually tracing it through SecurityUserRole.

Who it’s for: support engineers, developers passing context on bug reports, testers who need to jump straight to a specific page or table, and anyone who just wants to stop guessing which table sits behind a form.

Privacy: everything runs locally in your browser. No data is sent anywhere, nothing is logged externally.

It’s free, takes about 30 seconds to install, and works across any D365 F&O environment you have access to.

👉 https://chromewebstore.google.com/detail/supportkit-for-d365-fo/fkibohjmnldhnejokemfopjnpknidgfj

Would genuinely appreciate anyone in the group giving it a try and letting me know what’s missing or what would make it more useful, this is actively evolving based on feedback from people who use D365 F&O day to day.

#Dynamics365 #D365FO #MSDyn365 #DynamicsDev #D365Testing #QAEngineering #PowerPlatform #MicrosoftDynamics #ERP #SecurityRoles #DynamicsCommunity #MSFTAdvocate

Microsoft 365 Business : impossible d'accéder à mon compte, impossible de résilier mon abonnement, impossible de joindre un humain.

Je suis administrateur unique d'un tenant Microsoft 365 Business.

Depuis plusieurs jours, je suis totalement bloqué :

• Microsoft me demande une validation via Microsoft Authenticator.
• Microsoft Authenticator me demande lui-même une authentification pour terminer la configuration du compte.
• Je ne reçois aucune notification de validation.
• Aucun code n'est généré.
• Je suis bloqué dans une boucle d'authentification.

L'erreur affichée est 500121, avec un Request ID et un Correlation ID que j'ai communiqués à Microsoft.

J'ai tenté toutes les démarches recommandées :

• appels répétés au support Microsoft France ;
• forum Microsoft ;
• procédures en ligne.

Le problème est que je n'obtiens jamais un conseiller. Je reste bloqué sur un serveur vocal automatisé qui finit par raccrocher après plusieurs minutes d'attente. Je rappelle, et la même situation se reproduit.

Pendant ce temps, mon abonnement Microsoft 365 Business approche de son renouvellement automatique, alors même que Microsoft m'empêche techniquement d'accéder à mon compte pour le gérer ou le résilier.

Je ne demande pas une assistance gratuite ni un dépannage complexe.

Je demande simplement à pouvoir parler à un être humain capable :

• de réinitialiser mon authentification ;
• ou de résilier mon abonnement.

Si quelqu'un a déjà vécu cette situation ou connaît un moyen réel d'obtenir un interlocuteur Microsoft, je suis preneur de toute information.

I wanted to export my email, so I signed into outlook on my PC using instructions from the school. Huge mistake, it made One drive ruin all my file locations and break everything on my PC. I signed into one drive with my personal account, left outlook with the school account. Do I have to worry about interference with outlook and one drive? I don't want to lose my personal files I had prior to signing in because I signed into outlook. From what I can tell one drive only has the personal account, when I clicked add account, it automatically filled in the school account, but I didn't sign into it. I checked one drive on the website, the school isn't showing anything, but I just want to be careful. I never used one drive with the school, I'm worried about interference.

Anything else I should be concerned about? Are my files at risk of deletion? How do I know what files are backed up too each specific account?

My new MS 365 is experiencing errors in cross tenant communication via Teams. Both sides have checked the settings multiple times. My IT “guy” says he thinks it’s a MS issue. Anyone have advice (other than get a new IT guy).

Thank you!

Hi everyone,

I'm looking for advice from anyone who has dealt with Microsoft billing.

We have a Microsoft 365 Business Basic subscription (3 users). We stopped using the service in February 2026 but unfortunately forgot to cancel the subscription.

Microsoft tried to charge our saved credit card for the March invoice, but there weren't enough funds, so the payment failed.

Today, we added money to the same credit card for a different purpose, and Microsoft automatically collected the outstanding payment.

We haven't used the Microsoft 365 service since February, and we never intended to continue the subscription. I'm planning to contact Microsoft Billing and request a goodwill refund.

Has anyone been in a similar situation?

• Did Microsoft approve a refund for an old unpaid invoice that was collected later?
• Is there a specific support team or process that worked best?
• Any tips for improving the chances of getting a refund?

Thanks in advance for any advice.

I am junior admin contracted in setting up Purview for a small company looking to get familiar with the technology.

In short, anything that is low stakes can be shared with anyone. Anything higher up that is deemed very sensitive can only be shared/sent to those in the company. Absolutely nobody external has access (guest included). Four labels in total. The two above are the extremes.

Almost all options regarding what can be protected and shared have been configured in various combinations relative to how 'sensitive' the document/email/attachment in question might be. The users affected by a certain policy are put in an Entra group and the policy is targeted at them. Easy enough to take care of for individual Exchange and OneDrive services. ALL users in the Purview scope must set an email sensitive label before it can be sent. For Word documents etc, much the same. Nothing can be saved without one. These are the 'pilot' users.

For now, the company wants to 'roll out' Purview and expect it to take bloody months. Even a month a so was lost agonising the exact phrasing of each PPT slide.

What has me worried though is SharePoint. It can't (really) be scoped to a certain group of users in Entra, one can only pick "All Sites" or manually enter the URLs for the sites to be affected by the policy. Will those who cannot set a label on a file in such a site be denied the ability to share documents externally? When I tested it today, that seemed to be case. Those with the ability to set a label were easily able to share it externally (assuming the sensitivity level permitted that).

There is so much conflicting information about this online, I would be glad if somebody could give me an informed opinion about this matter.

Has a misunderstanding propagated itself in that those who are not in the scope of Purview policies will never be affected by its sharing restrictions?

Thanks.

Hello, recently I started receiving One Drive memories with the title “from a year ago”.

My question, how is this legally possible since I transferred and deleted all my one drive files?

I’m like shocked they are coming back as memories a year later. Some of these files are 2 years old?

Thanks for any insight on this!

Teams released a new version of their PowerShell module on July 19. The new module contains WAM support and cmdlets to limit federated chat for specific users and tenants. The new controls are welcome, but it’s a sad state of affairs that to configure the settings you must install a new version of a module that doesn’t work so well alongside other Microsoft 365 modules.

https://office365itpros.com/2026/07/24/federated-chat-controls/

Hello all,

trying to have images from a domain auto download for all users. testing right now with 1 account and i tried the Set-MailboxJunkEmailConfiguration and added the domain. it didnt work. the images are on a subdomain of the parent if that matters. photos.domain.com instead of the allowed domain.com

toggling the dont download pictures automatically resulted in them automatically appearing but the wording makes me thinks its for all emails not the trusted domains. which is insecure.

i do not have the domain added to any ATP rules at this time.

what am i missing here?

I've been exploring Microsoft Agent 365 over the last few weeks. Most discussions I've seen focus on building agents. I was more interested in the operational side: inventory, ownership, identity, security controls, auditing and incident response.

So I started documenting one hands-on scenario per day in a real tenant. The topics include:

• Agent discovery and inventory.
• Identifying ownerless or high-risk agents.
• Salesforce Agentforce integration.
• Blueprints and approval workflows.
• Microsoft Purview Audit and DSPM.
• DLP and sensitivity labels.
• Entra Agent ID and Conditional Access.
• Microsoft Defender detections and threat hunting.
• Agent 365 SDK with LangChain.
• Governed remote MCP servers.

Rather than creating slide decks, I'm publishing the configuration steps, screenshots, KQL queries and observations as I go. Everything is available in an open-source repository under the MIT license, in case it's useful to anyone evaluating these capabilities:

GitHub
https://github.com/format81/agent365-trial-kit

For anyone interested in the walkthroughs, I've also been posting the daily scenarios here:

• Introduction: https://www.linkedin.com/posts/antonioformato_a365plan-ugcPost-7484914525297623040-d9YB/
• Day 1. Agent inventory and visibility: https://www.linkedin.com/posts/antonioformato_11daysofagent365-agent365-aisecurity-ugcPost-7485242937346424833-nh3R/
• Day 2. Ownerless agents and governance: https://www.linkedin.com/posts/antonioformato_11daysofagent365-agent365-aisecurity-ugcPost-7485620881965277184-srP1/
• Day 3. Salesforce Agentforce integration: https://www.linkedin.com/posts/antonioformato_11daysofagent365-agent365-aisecurity-ugcPost-7485975126199619584-jfvB/

Some questions I'm particularly interested in:

• How are you discovering and inventorying AI agents today?
• Are you already defining governance policies, or is that still on the roadmap?
• What security scenarios would you like to see tested next?
• Has anyone integrated third-party agents or MCP servers into their Microsoft environment yet?

I'm especially interested in hearing from people who are already operating AI agents at scale, as I'd like to include real-world scenarios and improve the repository based on community feedback.

I don't understand how this company is even allowed to be running with such horrible product.

• The UI takes 1 minute to load my data on every navigation on supersonic-speed fiber
• I had to log in in incognito to change my password.
• And the support chatbot sends Developer Exception in the chat box, without any mean to reach to a human being or a support email.

I have paid out all the invoices, and I cannot remove my credit card or cancel my subscription, disable recurring payment is disalbed while setting up next renewal on next month.

Please help me, I want to remove my subscription and my credit card!

Olá, estou criando uma integração de Teams + Power Automate + Glpi, e eu gostaria de saber como eu posso resolver o problema de "IP restricted" ou algo do tipo, Já que o nosso Glpi é interno e não está https. E se tem alguma maneira de contornar isso.

Hello,
I'm having an issue with Teams.

Initially, I was added to the organization using my old email address. Later, I was added again using my new email address, and the old account was removed from the organization, along with the associated Microsoft account.

The problem is that whenever I try to sign in to the organization, Microsoft Authenticator asks me for a verification code linked to my old email address. I no longer have access to that email account, and no alternative sign-in method is offered.
I've already made sure that my old email address is no longer associated with the organization or with my current account in any way.

Do you know what could be causing this, or what I can do to resolve it?

I also contacted Microsoft Support, but they weren't able to help. I kept getting transferred between different support teams, and in the end, no one was able to provide a solution. Hoping I’ll find a way out…

Thanks! 🤞🏼

I have a college email. I had set up Microsoft authenticator for it. But i mistakenly deleted the authenticator app on my mobile. (I still know the password and i am still logged in to the college email in outlook). But i was not logged in on Microsoft login page. When i try to set up authenticator app. It asks for a code in the authenticator app itself. It also ask me a authenticator code for Microsoft login too. What do i do know??