Forum Widgets
Latest Discussions
MFA User Group
Hello everyone, I'm new to this group. My first exposure to MS365 Administration happened in October 2023 when a former MSP was paid to move my company's Exchange on-prem to the cloud. I'm putting a document together on how to setup MFA and generate app specific passwords to permit MS365 authentication between my ERP system and MS365 Outlook. During the conversion process the MSP created two security groups. MFA Users and MFA Exclusions. My question is, was this necessary as part of the conversion for say, place holders for accounts, or is this something I should be maintaining? Thank you in advance for any input.
Microsoft 365 Apps Admin Center - Inventory Error
We're running into issues trying to access Inventory in the 365 Apps Admin Center (https://config.office.com/). When trying to swap a specific group of devices to a different update channel (Current to Monthly Enterprise), we go into the Apps Admin Center, select inventory and receive a generic error: There was a problem showing the security update status information. Please refresh the page or try again later. 00000000-0000-0000-0000-000000000000 This has been happening for 3 days now. Was working fine prior to that (and were able to flip a few devices earlier in the week). Anyone else experiencing the same/similar issues? Multiple 365 Admin's within our organization are getting the same error, so it's not isolated to 1 person/1 account.
Need assistance: Unable to Remove GoDaddy as Partner/Reseller and Unfederate the Domain actus.law
I have been trying to resolve this issue for nearly four weeks, and been through many troubleshooting sessions and telephone calls with Microsoft Support, but this seems extremely complicated: The domain actus.law is owned by the Danish law firm Actus Law, and is registered with GoDaddy as the domain registrar. The Microsoft 365 tenant was originally created and federated by GoDaddy, who acted as the delegated administrator (via DAP/GDAP). On advice from a Microsoft Sales Advisor, Actus Law purchased a Microsoft 365 Business Standard license directly through Microsoft connected to the above tenant with the goal of managing the tenant independently through the Microsoft 365 Admin Center — without GoDaddy's involvement, beyond being the registrar. After the purchase it was impossible to manage users/licenses/domains in the Microsoft 365 Admin Center, as the domain is federated and therefore all requests always get redirected to GoDaddy. It was therefore not possible to verify the domain or create any users. I contacted Microsoft Support on 8 May, where I was told that the way forward was to delete current DNS records and remove GoDaddy's partnership privileges in the Microsoft 365 Admin Center. We therefore deleted all GoDaddy's delegated administrative privileges (GDAP/DAP) on 8 May 2025 and requested GoDaddy to end the reseller relationship. After this the support agent closed the ticket. This was handled through Support Ticket #2505081420003154. GoDaddy afterwards confirmed that they have removed all rights and that the domain is free to be unfederated. However, this did not solve the problem, since GoDaddy is still registered as partner and the domain is still federated. Therefore I am not allowed to make any changes and I always get redirected to GoDaddy when trying to manage anything in Microsoft 365 Admin Center. On 9 May I contacted Microsoft Support again and asked to disconnect the tenant from GoDaddy so I can manage everything in Microsoft 365 Support Center. This was under the Support Ticket #2505091420000046. The assigned agent tried during multiple weeks to troubleshoot and fix the problem with PowerShell commands using both MsolService and Microsoft.Graph, but always ended up getting access errors or insufficient privileges to perform the change in authorization from federated to managed. It has also not been possible to delete GoDaddy as partner. On 20 May I was asked to contact GoDaddy again to make sure that they had removed themselves as partner, and I got the following confirmation in writing from GoDaddy's Advanced Technical Support: "The Microsoft 365 organization for actus.law is no longer associated with GoDaddy. You can now reach out to Microsoft directly and receive support for a password reset for any admin user you need to access, or any other support issues. NOTE: If the domain is still set to use GoDaddy’s email login system you will need to ask Microsoft to “un-federate” the domain." On 21 May I explained GoDaddy's response in an email to the assigned agent, but now the agent simply stopped responding to my emails. I sent a reminder after 5 days, but did not get any response. On 28 May I called Microsoft Support and was assigned a new agent. That agent told me to contact GoDaddy, as it seems they still have visible GDAP, and only GoDaddy can remove that. Then the agent closed the ticket. I tried to contact GoDaddy afterwards, but they told me that the reseller relationship/GDAP was completely removed from GoDaddy's side on 8 May 2025 and all changes have propagated. However, since all GDAP/DAP had already been deleted at that point (which was done on 8 May, see above under number 4), GoDaddy could not remove it in Microsoft's systems according to the normal procedure so it is correctly reflected in the Microsoft 365 tenant. So they asked me to contact Microsoft Support again and explain the situation. WHAT I WANT TO ACHIEVE: I want GoDaddy completely removed as partner/administrator from my tenant and the domain actus.law to be "managed" and not "federated", so I can manage everything directly in the Microsoft 365 Admin Center and use my Microsoft 365 Business license. CURRENT STATUS: GoDaddy says everything has been removed on their end and that only Microsoft can now unfederate the domain. Microsoft Support says GoDaddy still needs to remove DAP/GDAP — but I cannot see their DAP/GDAPS anywhere in the Admin Center, and GoDaddy says they’ve already done it. Does anyone have an idea of what to do in this situation? I would appreciate any help, I feel completely stuck, and I am unable to set up any users or mails 😒
Integrated Apps & Central Deployment Fails
Issue with Integrated App and/or Central Deployment of add-ins ending with errors. After trying several different apps, for Excel or Word the process ends with a different error depending on which method is used. Integrated Apps, ends with a Failed Central Deployment, ends with “This operation was unsuccessful - reasons may include: Learn more about eligibility requirements.” We are trying to deploy the web version of the app All users have a Business Premium license all prerequisites appear to be fine tried 3-4 different apps using both methods, Integrated apps & Central Deployment (Add-in) using Global Admin account to deploy Tried setting everyone, dif individuals all fail We are trying to deploy an add-in for Excel web app, any assistance would be appreciated.
DLP Alert Received, but no report.
Hi, I have received the following alert, but I am unable to locate the report in Compliance Centre. Can anyone give me guidance on where to look specifically? I only have default policies applied, but would like to look into this alert in more detail to understand what is happening and check it's legitimate. Many thanks, Pete A match of one or more of your organization’s policy rules has been detected. Report Id: xxxxxxx-0906-4c2e-887b-85cd0e68e117 Person who last modified document: Severity: High False positive: No Override: No Condition matched: External recipients Condition matched: Contains sensitive information
Obtain Deleted Stats (SharePoint) by Retention Policy
I've scoured: Identify the available PowerShell cmdlets for retention | Microsoft Learn and the Unified Audit Log (Using Search-UnifiedAuditLog in Powershell: All You Need To Know, How to Query Microsoft 365 Audit Logs using PowerShell – TheITBros) to see if I can come up with a method to obtain some statistics regarding how many files and space (storage) has been freed up with the use of retention policies being enabled. I'm drawing a blank. In an ideal world, I'd like know how many files have been deleted by the system (the system enforcing a 5 Year from last modified Date and Delete Policy) for the last year or 6 month intervals. If possible the corresponding volume of storage space recovered from these deletions. Any ideas?
Security Admin Center Tenant Allow/Block List Not Able to Block IPv4?
While using the Security Admin Center Tenant Allow/Block List we have been able to block specific email addresses and IPv6 IP addresses but are unable to block IPv4 IP addresses. We have tried both using the console and the CLI but have turned up unsuccessful both times when it comes to IPv4. A large majority of the phishing attempts that we encounter come from IPv4 addresses but we have been unable to block any of these. Will there ever be functionality for IPv4 within the Tenant Allow/Block list or is the only option to use conditional access policies? Also why is this enterprise tool only functional with IPv6 and without documentation stating that it does not work for IPv4?
