Forum Widgets
Latest Discussions
Customer CUSTOMER_NAME notified of anomalous activity in Azure subscription
How do others feel about the alerts showing up in the Partner Center? We’ve detected suspicious or malicious activity in this Azure subscription. The customer of this subscription has been notified. What suspicious or malicious activity did microsoft detect you ask? An important security update is available for your Windows Server Update Services (WSUS) resource(s). That's right, there is no suspicious or malicious activity. Microsoft wants people to install an out of band security update and thought sending a notification to all azure customers was the best way to ensure that happened. Half the clients that received this alert aren't even running windows servers! Those that are running windows servers do not have the WSUS role installed. All the clients Microsoft alerted us about to suspicious activity in their subscriptions... Don't use WSUS We did have the pleasure of manually closing every single alert as "ignore" and I'm delighted to know that these alerts didn't count towards the security requirement to have an avg response time of less than 24h. I thought the partner security alerts were to notify us of critical issues microsoft detected in azure subscriptions. This, does not appear to be that. Am I missing something? thoughts?Securing Global Administrator accounts
Hello all, According to this article: Use admin accounts only for Microsoft 365 administration. Admins should have a separate user account for their regular use of Microsoft 365 Apps, and only use their administrative account when necessary to manage accounts and devices, and while working on other admin functions. It's also a good idea to remove the Microsoft 365 license from your admin accounts so you don't have to pay for extra licenses. I should have a separate unlicensed admin account. How do I follow the above recommendation and continue to receive emails from the partner center? We have also been encouraged to use Privileged Identity Management, and use one account but only activate the admin role when needed. Does Microsoft recommend using PIM, or do they recommend using separate admin accounts? When using PIM, I only receive email sent to global administrators, when the PIM role is active. I am having trouble understanding how to follow this guidance when the admin portals do not appear to support emailing the "regular user account" of an administrator. When I asked Partner Center frontline support for clarification on this guidance I was asked to post my question here. Thanks!ICYMI: Drive Microsoft 365 renewals and upgrades ahead of pricing and packaging updates
We recently announced that in 2026, we’re expanding the availability of security and management capabilities to the commercial Microsoft 365 suites. Along with these added features, there will also be a global price update to these suites across all purchasing channels effective July 1, 2026. Continue reading blog here Be sure to follow the Partner news blog for all partner related announcements!
Flagged for “serious compliance violations” – possible TAUX0 / third-party data mix-up?
Hello everyone, I’m posting here to see if anyone has experienced something similar or has any guidance. My company has been operating since 2006 as an IT/consulting firm. All members / staff are fully vetted, currently hold active government-level clearances with an impeccable record and we go through rigorous verification and clearance checks. Recently, our Microsoft partner / CSP access was deactivated. The only explanation I receive from support is the standard message: “Microsoft runs on trust… As a part of this commitment, we perform regular due diligence and vetting on all members of our partner network. In this case, our vetting revealed serious compliance violations attributable to your organization or with persons in a position of influence within your organization. We are unable to share further details.” When I asked for a meeting, support created a ticket and sent me a link to schedule an appointment. I scheduled it, but the ticket was closed almost immediately. At the same time, I received the same boilerplate “serious compliance violations” message again, and no one joined the scheduled meeting. I was then told explicitly that the decision cannot be changed by opening a new support case. From the outside, it looks like an internal “flag” has been set and front-line support can only paste that one response. I strongly suspect there may be a mistaken identity or bad third-party data involved. I see that the verification process uses AU10TIX and, from what I can tell, AU10TIX in turn relies on a data source called TAUX0 (or similar). When doing simple searches on my name/company, I see multiple entries for different entities that share similar names, some of those unrelated entities do have legal records. My concern is that these mixed records in TAUX0 (or related sources) have been combined and attributed to me/my company, even though we have no such history. I did contact AU10TIX, they said they will refer this to their R&D but "nothing they can do", I will have to contact Microsoft. My questions to the community: 1. Has anyone else had their partner/CSP access deactivated with the same “serious compliance violations” boilerplate and no details? 2. Was anyone able to get clarification or a remediation path, or is this truly final once the internal flag is set? 3. Does this type of enforcement affect only partner/CSP status, or can it also impact our ability to use Microsoft services as a customer? I’m not looking to argue or threaten legal actions, so please no such suggestions. I simply want to understand the practical impact and whether there is any constructive way to correct an apparent misunderstanding caused by third-party data. We are a small business and heavily impacted by this, as we cannot renew our Partner benefit packages. My hope is that, out of cases like this, Microsoft and AU10TIX can find a way to provide some guidance and a remediation path for small businesses, instead of leaving them in the dark with a generic “serious compliance violations” label and no explanation. Thanks in advance for any insights or similar experiences you can share.
Azure daily rated usage downloads not working since 1st Dec
Has anyone else been experiencing issues downloading unbilled Azure usage from the MS Graph Async API v2 for the last few days? We have not been able to download any data newer than the 1st of Dec, meaning we can't show our customers their current month usage data. I've logged a support ticket, but just wondering if this is affecting others too.
