Tony Redmond

Guest Accounts Now Used for SPO External Access to Files From July 2026. SharePoint Online and OneDrive for Business will use Entra B2B Collaboration (guest accounts) fo control external access to shared files.

In July 2026, #SharePointOnline will drop support for one-time passcodes for external access. Tenants that haven't yet moved to #Entra B2B Collaboration will have to do so to share files and folders externally.
office365itpros.com/2026/03/06/g...
#Microsoft365

Measuring KPIs like Response Times for Shared Mailboxes Shared mailboxes are not CRM systems. However, many Microsoft 365 tenants use shared mailboxes to handle customer queries and then want to measure KPIs.

#ExchangeOnline shared mailboxes are definitely not designed to be a CRM system, but people use shared mailboxes to handle customer queries. Here's how to extract some KPIs for response times using the Graph and #PowerShell: office365itpros.com/2026/03/05/s...
#Microsoft365

How to Test a File Against DLP Sensitive Information Types Sensitive Information types (SITs) are definitions of data like credit card numbers used by DLP rules to detect potential external sharing violations.

A new test option is available to check files against #Microsoft365 sensitive information types like credit card or passport numbers. It's a helpful way to assess what information types to use in DLP policy rules: office365itpros.com/2026/03/04/s...

AI in SharePoint Celebrates SharePoint 25th Anniversary Microsoft celebrated the 25th anniversary of SharePoint with a batch of announcements, including AI in SharePoint, to manage SharePoint with natural language.

Microsoft celebrated the 25th anniversary of #SharePoint with a bunch of announcements. Here's what I gleaned from the usual overhyped text... departmental billing for #Microsoft365 backup might be the most interesting: office365itpros.com/2026/03/03/a...

March 2026 Update for Office 365 for IT Pros We've released monthly update #129 for the Office 365 for IT Pros eBook. Current subscribers can download the EPUB and PDF files from gumroad.com.

The March 2026 Update for the #Office365 for IT Pros eBook is available for current subscribers to download. This month we celebrate the 30th anniversary of #Exchange and the 25th anniversary of #SharePoint, both critical services for #Microsoft365.
office365itpros.com/2026/03/02/o...

Planner’s Newly Redesigned Interface Microsoft has launched a redesigned user interface for the Planner app. The big news is the inclusion of task chat. Goals are also available, with a license.

Microsoft has a redesigned user interface for the Planner app. The big news is the inclusion of task chat. Goals are also available, but only if you have a #Microsoft365 Copilot or Planner Premium licenses. Task Chat is the highlight. More:
office365itpros.com/2026/02/27/p...

Use a Default Sensitivity Label to Extend Protection for SPO Sensitivity labels offer great protection against unauthorized access, but sometimes files that aren't encrypted escape from a document library.

#Microsoft365 sensitivity labels can protect #SharePoint files when downloaded through a default label that exploits user-defined permissions. Here's how: office365itpros.com/2026/02/26/s...

How to Use Scoped Graph Permissions with SharePoint Lists This article explains how to use scoped Graph permissions to restrict app access to lists and list items in SharePoint Online and OneDrive for Business sites.

Following up on other posts explaining how to restrict app access to email, sites, and files, here's how to restrict app access to #SharePoint Online lists and list items: office365itpros.com/2026/02/25/s...
#Microsoft365

DLP Policy for Copilot Extends to All Storage Locations Microsoft has enhanced the DLP policy for Copilot to cover Office files held in any storage location (as opposed to just Microsoft 365).

After all the recent fuss about a bug that allowed #Copilot to consume some email that the DLP policy should have blocked, we learn that Microsoft has extended policy protection for Office and PDF files to any storage location: office365itpros.com/2026/02/24/d...
#Microsoft365

Update #21 for Automating Microsoft 365 with PowerShell Update #21 for the Automating Microsoft 365 with PowerShell eBook is now available for current subscribers to download. PDF and EPUB files are available.

For all the #PowerShell fans who work with #Microsoft365 across Entra ID, SharePoint, Exchange, OneDrive, Planner, Teams, and so on... we've released update #21 for the Automating Microsoft 365 with PowerShell eBook:
office365itpros.com/2026/02/23/a...

Comparing Microsoft 365 Copilot and ChatGPT Enterprise Microsoft would very much like Microsoft 365 tenants to use Copilot instead of ChatGPT. A recent comparison between Copilot and ChatGPT outlines why.

Microsoft's FY26 Q2 results revealed 15 million users for #Microsoft365 Copilot, which must have been disappointing. With that in mind, Microsoft has started to publicize the advantages for #Copilot over ChatGPT. Are the assertions correct?
office365itpros.com/2026/02/20/c...

Using Dev Proxy with the Microsoft Graph PowerShell SDK Dev Proxy is a Microsoft tool built to help developers figure out the most effective way of using Microsoft Graph API requests. Here we use it with PowerShell.

A slightly nerdy post about using the Dev Proxy tool with the Microsoft Graph #PowerShell SDK. The tool might help some to improve the quality of their scripts for #Microsoft365 tenants...
office365itpros.com/2026/02/19/d...

Limit App Access to SharePoint Online Files and Folders This article describes how to use scoped permissions to give apps granular access to files and folders in SharePoint Online and OneDrive for Business sites.

Apps might like to have full access to all files in a #SharePoint site, but here's how to use Graph permissions to restrict app access to specific files or folders.
office365itpros.com/2026/02/18/s...
#Microsoft365

Control Graph Mail.Send Permission with RBAC for Applications The temptation to use the Mail.Send application permission can lead PowerShell developers into trouble because the permission allows access to all mailboxes.

I see many #PowerShell scripts written for #Microsoft365 that use the Mail.Send application permission. That's fine - if you use RBAC for Applications to restrict the mailboxes that the script can send from. Here's a primer on the topic: office365itpros.com/2026/02/17/m...

Exchange Online PowerShell Dumps the Credential Parameter Microsoft announced the deprecation of the Credential parameter for the Connect-ExchangeOnline cmdlet in the Exchange Online PowerShell module.

#ExchangeOnline #PowerShell is dumping the old Credential parameter for the Connect-ExchangeOnline cmdlet. Will the change break some scripts that run on a scheduled basis using Task Scheduler? Time to check and upgrade: office365itpros.com/2026/02/16/e...
#Microsoft365

DLP Policy for Copilot Bug Exposes Confidential Email A bug in the DLP policy for Copilot allowed Copilot Chat to expose confidential email. The problem is being fixed, but it's a reminder of how AI can expose info

A code issue caused #Copilot for #Microsoft365 to surface information in chat responses from protected email. Microsoft is fixing the bug, but it's a good wake-up call to remind everyone to secure sensitive information against AI.
office365itpros.com/2026/02/13/d...

How to Deactivate Applications in Entra ID This article explores how to deactivate applications (aka disable apps) in Entra ID. Everything is done through PowerShell because no UI is available.

What do you do if you find a suspicious #EntraID app in your #Microsoft365 tenant? Deactivating the app puts it into a state where it can no longer access resources while keeping its settings. Here's how to do the job, with a script to help: office365itpros.com/2026/02/11/d...

Maester and UTCM Are Complementary Tools for Microsoft 365 Since the release of preview version of the UTCM solution, some have asked if UTCM will replace the Maester tool. The answer is no. The tools are complementary.

Since the (preview) release of Microsoft's Unified Tenant Configuration Management solution, some have asked if UTCM replaces Maester or is a better solution. Actually, both work together in #Microsoft365 tenants, as explained here: office365itpros.com/2026/02/10/m...

With > 800K downloads of the SDK, I think the developers have discovered that many edge cases exist about how people connect interactive sessions that were disrupted with the (security mandated) change to WAM.

Report Adaptive Scope Membership with PowerShell A new Get-AdaptiveScopeMembers cmdlet reveals details of adaptive scope membership to make it possible to report this information programmatically.

A new #PowerShell cmdlet is available to report the membership of #Purview adaptive scopes. There's some points to understanding when using the cmdlet, explained here with a sample script to demonstrate: office365itpros.com/2026/02/09/a...
#Microsoft365

Connect-MgGraph 'InteractiveBrowserCredential authentication failed' Elevated PowerShell Window · Issue #3489 · microsoftgraph/msgraph-sdk-powershell Describe the bug I am trying Connect-MgGraph in an elevated PowerShell session but am receiving a 'InteractiveBrowserCredential authentication failed' error. I can connect successfully in a non-ele...

Microsoft Graph PowerShell SDK V2.35.1 is available. This is an important update for anyone who doesn't use a cloud account to sign into Windows (e.g. sign into AD and then run Connect-MgGraph). Some of the fixed issues are discussed at github.com/microsoftgra...

Final Countdown to EWS Retirement by May 2027 Microsoft announced the dates leading to the final EWS retirement from Exchange Online. If all goes well, EWS will cease functioning in the cloud by May 2027.

Microsoft will permanently remove Exchange Web Services from #ExchangeOnline starting in April 2027. The big question is will #Microsoft365 tenants and ISVs be ready for the transition. EWS and the Graph APIs are not perfect matches.
office365itpros.com/2026/02/06/e...

UserConfiguration API Available to AId EWS Migration A new userConfiguration API is available to retrive data from Folder Associated Items (FAIs) in Exchange mailboxes. It's part of the EWS migration project.

A new #MicrosoftGraph API is available to help ISVs migrate products off Exchange Web Services (EWS). The userConfiguration API exposes details of settings held in FAIs. This probably won't affect many #Microsoft365 tenants...
office365itpros.com/2026/02/05/u...

DSI and Other PAYG Services Can Rack Up Compute Charges Microsoft offers several PAYG services to Microsoft 365 tenants. Data Security Investigations (DSI) is the newest. These services can rack up compute charges.

Be careful with Microsoft #Purview PAYG solutions like Data Security Investigations (DSI). It's all too easy to run up large bills for compute units consumed by AI processing.
office365itpros.com/2026/02/04/d...
#Microsoft365

UTCM: New Way to Monitor Microsoft 365 Tenant Config Changes UTCM is a new tenant configuration management solution that can monitor changes to over 300 resource types found within Microsoft 365 tenants.

Unified Tenant Configuration Management (UTCM) is available in beta. The solution must be managed through Graph APIs for now and is a tad incomplete. But you can see the value of managing the settings of #Microsoft365 tenants through UTCM: office365itpros.com/2026/02/03/u...

February 2026 Update for Office 365 for IT Pros The February 2026 (update #128) files for the Office 365 for IT Pros (2026 edition) eBook are available for subscribers to download from Gumroad.com.

The February 2026 (monthly update #128) EPUB and PDF files for the #Office365 for IT Pros eBook are now available for current subscribers to download. All the #Microsoft365 news that's fit to print...
office365itpros.com/2026/02/02/o...

Microsoft FY26 Q2 Results: 450 Million Microsoft 365 Seats Microsoft FY26 Q2 results included a new figure for Microsoft 365 commercial paid seats: "over 450 million."

Microsoft's FY26 Q2 resulted revealed that #Microsoft365 now has over 450 million commercial paid seats... but only 3.3% pay for Microsoft 365 Copilot (15 million). It's $5.4 billion revenue at list, but not much when compared to Capex.
office365itpros.com/2026/01/30/m...

SMTP AUTH Client Submission Retirement Delayed Microsoft has delayed the retirement of basic authentication for the SMTP AUTH client submissions protocol to 2027 or beyond.

Microsoft's decision to push out the retirement date of basic authentication for the SMTP AUTH client submission is likely due to devices not being able to support OAuth. Maybe time to find another SMTP server for apps and devices?
office365itpros.com/2026/01/29/s...
#Microsoft365

Scheduling Channel Meetings with the Microsoft Graph PowerShell SDK Channel meetings are a type of meeting specifically intended for channel members to attend. Creating normal meetings is easy, but can you create channel meetings with the Graph API? As it turns out, y...

Need to create #MicrosoftTeams channel meetings with #PowerShell? As it turns out, the available Graph APIs don't support the creation of channel meetings, so a workaround is needed. Here's what we did: practical365.com/channel-meet...
#Microsoft365

How to Restrict Sign-in Audiences for Entra Apps Entra multi-tenant apps can be used by any tenant - unless you restrict sign-in audiences. In this article, we explain the preview feature to apply restrictions

Many #Microsoft365 tenants create #EntraID apps for different purposes. Most of the apps are single-tenant (or should be!) but if you create multi-tenant apps, consider if restricting access to specific tenants is a good idea. Here's how: office365itpros.com/2026/01/28/r...