Auto-expanding archives will grow past 1.5 TB for E5 tenants in October. Microsoft hasn’t said to what, and that vagueness matters if you’re planning retention three years out.
Continue Reading
Windows endpoints have ignored what’s inside your .zip and .rar files. In December, Purview DLP starts looking, and rules that never fired may suddenly block—or alerts you’ve tuned around may vanish.
Continue Reading
CAE is supposed to kill compromised tokens in minutes, not hours. But security researchers found inconsistent implementation across Microsoft’s first-party apps—which means your real mean-time-to-revoke is only as fast as the least-compliant app in the session.
Continue Reading
There’s a hybrid Exchange server somewhere in your org that’s been quietly relaying mail for years. This week, if it’s not on the October 2025 baseline, Microsoft starts throttling it—and throttling becomes blocking.
Continue Reading
Copilot inherits every permission your users have, then indexes everything Microsoft Graph says they can technically open. That SharePoint site shared with ‘Everyone’ since 2021 just became searchable.
Continue Reading
The policy saved fine and showed “on.” What it didn’t do was cover the sites I needed — I’d hit a scope ceiling. Roadmap 570445 is lifting it.
Continue Reading
If your M365 tenant has never added a verified custom domain and every user still signs in with a .onmicrosoft.com address, Teams external collaboration stopped working this month. Here’s what MOERA is, why Microsoft pulled the plug, and the two-step fix admins keep getting wrong.
Continue Reading
Microsoft publishes new Graph permissions without advance notice, and your consent policies make decisions about them before you do. Here’s the PowerShell automation that catches new permissions the week they appear.
Continue Reading
The browser fallback that many M365 admins rely on for interactive Graph sessions is being retired in favor of Windows Account Manager broker authentication. If your scripts assume a browser prompt, or you run Graph PowerShell on non-domain-joined machines or Linux, you need to test now.
Continue ReadingApp-centric management finally lands in the DoD cloud in October 2026, and it quietly retires the app permission policy model your governance has leaned on for years. Miss the migration mapping and you’ll either lock users out or throw the store wide open.
Continue Reading