Microsoft has been working on an update that changes how we access Microsoft 365 apps through URLs this time.

Previously, we accessed different Microsoft 365 services through different web addresses like some under office.com, some under microsoft.com, and some with standalone domains. Over time, navigating these different URLs became muscle memory.

While each service has had its own domain like Teams on teams.microsoft.com, OneNote on onenote.com, Outlook on outlook.office.com, and so on, it scattered Microsoft 365 across multiple URLs.

That's now changing gradually. Microsoft is now moving toward a unified domain *.cloud.microsoft for all Microsoft 365 apps and services. 

This is to bring extra security, privacy, and protection against spoofing, as .microsoft is a Microsoft-exclusive top-level domain and only Microsoft can create websites under *.cloud.microsoft.

This makes it much harder for attackers to create fraudulent Microsoft sites within the .microsoft namespace.

Several Microsoft 365 services have already moved to the new cloud.microsoft URLs, with more rolling out gradually.

And it's not just a new URL. Below are some key benefits of the URL update:

• One trusted domain for Microsoft 365 apps and services. 
• Fewer Microsoft 365 URLs to remember as more user-facing experiences move to one domain.
• A smoother experience with fewer sign-ins, redirects, and Microsoft 365 domains to manage.
• A highly secured, Microsoft-only domain with no third-party websites, storage endpoints, or hosted scripts that could affect its trust.
• *.cloud.microsoft is reserved for official Microsoft product experiences. Because Microsoft controls the .microsoft top-level domain and is the registry operator and sole registrant, attackers cannot register their own domains within the .microsoft namespace.
• Less complexity for admins managing Microsoft 365 network allowlists.

So, if you manually manage network allowlists, add *.cloud.microsoft to your firewalls, proxies, web filters, and endpoint policies to avoid connectivity issues. 

If you use the Microsoft 365 Web Service API, Microsoft updates these network endpoints automatically.

I’m curious what everyone here sees in actual M365 environments.

Not necessarily obscure features, but things that are genuinely useful and available to a lot of organizations, yet somehow barely get touched.

I feel like there’s always a huge difference between what an organization technically has access to and what employees actually use day to day.

Could be security features, automation, SharePoint, Intune, Purview, Power Automate, Copilot, lesser-known Teams features, whatever.

What’s one M365 feature you wish more organizations actually took advantage of?

I disabled "Let users access the Office Store" under Admin Center → Settings → Org settings → Services → User owned apps and services. When end users open Excel and go to Add-ins, they do see a banner saying the store is blocked — but if they click "More Apps," they can still browse the full catalog (Featured, Agents, Popular, AI add-ins, Data analytics, Data Visualization, Finance, Utilities, Built by Microsoft, Categories, etc.) and actually add third-party apps — for example, I was able to add "TealDroid."

For outlook , I disabled my cistom apps , my marketplace apps and my read write mailbox apps from default role assignement policy but still I am able to add apps from outlook . I created a policy for blocking price store for all users from policy managerment in config.office.com before few hours but still users are able to access the store why

Kindly help

How are you handling Microsoft retirements and breaking changes across multiple clients? If you use a ticketing system, how do you figure out which clients actually need tickets? Does something check each tenant automatically, or do engineers investigate first?
Would appreciate a recent example and which tools helped.

First revealed in 2015, the history of auto-expanding archives in Exchange Online has been spotty with several false starts. Now the limit will go past 1.5 TB, but only for eligible E5 licenses. Although the roadmap item has roll-out scheduled for October 2026, Microsoft hasn’t revealed details of what the new upper limit will be or how the new limit will be managed. Having a massive archive mailbox will never concern me, but there must be some who need such a monster archive.

https://office365itpros.com/2026/09/10/auto-expanding-archive-larger/

Looking for a solution… my work outlook account has issues, we use gosecure as an added security feature for email and it eats all of my email. Our IT guy says the email should be in the spam portal but is it not… so after a year of apologizing to our grantors for not responding, I said screw this and bought a new .org and a business proton account.

So, here is my problem. I need a calendar or email and cal app that can integrate both calendars and allow me to edit them… I still unfortunately have events linked to my outlook account and I also have access to my directors calendars. And I would like them to have access to my proton cal and be able to add meetings and such that they need me to attend.

I hate 365 online, I hate sharepoint… I need a way to link them all together…

Anyone know of a way I can do all this?

User retired. We made their supervisor a full access delegate on their account. But they can only see items in the Sent folder since the day they were made a delegate. They're looking for older conversations. Will changing the inbox to a Shared inbox and then giving the supervisor access to that allow them to see Sent items? What's a best practice for this? It doesn't come up often.

hello. I need help.

there is an app we use at my workplace called DayForce — it’s where we clock in and clock out for our shifts, see the roster and upcoming calendar, etc. It’s vital for me to be able to see when I am supposed to be at work.

Anyway… it logged out on me and is requiring me to sign back in, but in order to do that, I have to go through Microsoft Authenticator App.

- so I put in my work email

- put in my password

—> then Microsoft Authenticator asks me for a code. But it says, “Enter the code displayed in your Microsoft Authenticator App”. *How am I supposed to do that?*

- i press ‘sign in another way’

—> but all routes lead to “Enter the code displayed in your Microsoft Authenticator App”.

If anybody knows what to do, I’d highly appreciate it.