Recent Discussions
How Permissions Creep Can Halt the Microsoft Graph PowerShell SDK
The Microsoft Graph PowerShell Command Line tools app is how people run Microsoft Graph PowerShell SDK cmdlets. The app can suffer from permissions creep, meaning that over time, the app accrues a set of delegated permissions used by people to access different types of Microsoft 365 and Entra ID information. All is fine until an internal limit is reached, at which point authentication fails and some permissions must be pruned. https://office365itpros.com/2026/07/23/permissions-creep-sdk/
Msgbox or Modal window Crash on PC Sleep
This has been an issue for a couple of years, but I haven't spent too much time trying to solve it because I thought it would eventually go away. It hasn't and it is becoming worse as I develop other parts of my application. Situation: When a msgbox (or modal window) is open and the PC sleeps, the application hangs upon PC awake. There's no way to get out it with ending the process. To replicate: Create and save blank database Create one module with a single public test function Enter msgbox "Hang Test", vbOkOnly Hit F5 to run the code. The message box pops up. Leave it. Put PC to sleep manually with windows | power | sleep Awaken PC, Access is now frozen. GPT provides a lot of explanations for this behavior, but it doesn't make sense and must be something that can be addressed. Windows 11, Version 2606 (Build 20131.20126 Click-to-Run)Purview DLP Blocks Sharing Files with Specific Domains or Users
A new DLP rule is available to control sharing of SharePoint and OneDrive files with selected domains and email addresses. The new rule supports an allow list (permit sharing) and can also specify a deny list (block sharing). The user interface takes a little getting used to, but when everything is configured and SharePoint has had a chance to respond to the block, the rule works and any attempt by a blocked user to use a sharing link is refused. https://office365itpros.com/2026/07/22/block-sharing-dlp-sharepoint/Primer: How to Use JSON Batching to Speed up Graph Processing
JSON batching is one of the most effective ways to speed up the processing of Graph API requests. Although it might seem complicated, once you understand how batches are put together and submitted to the Graph batch endpoint, it’s not that hard. JSON batching is of particular interest to large Microsoft 365 tenants that might need to process tens of thousands of accounts, mailboxes, groups, and so on. All explained here, along with a PowerShell script to show how it’s done. https://office365itpros.com/2026/07/21/json-batching-primer/Using User Assigned Managed Identities with Microsoft 365 Automation7
A user assigned managed identity (UAMI) is a secure method to authenticate with many important endpoints, including the Microsoft Graph. It’s like a system assigned managed identity (SAMI), but the big difference is that a UAMI is an Azure resource that isn’t tied to an automation account. It can be used in multiple areas of Azure and a UAMI might be a better option for large organizations that make extensive use of Azure resources. https://office365itpros.com/2026/07/20/user-assigned-managed-identity/How to Create an Approval Workflow in SharePoint Online (Microsoft 365)
Managing approvals efficiently is one of the biggest challenges for organizations. Whether you’re approving invoices, purchase requests, leave applications, contracts, or company policies, relying on emails and manual follow-ups often leads to delays, confusion, and missed deadlines. https://dellenny.com/how-to-create-an-approval-workflow-in-sharepoint-online-microsoft-365/Microsoft to Stop Providing Telephony-Based Authentication Methods for MFA in February 2027
In an important announcement for all tenants, Microsoft revealed that Entra ID will no longer provide SMS one-time codes or voice calls for MFA challenges after February 1, 2027. Tenants can continue to use telephony-based authentication methods after that date, but only by purchasing a service from a telecom provider. This is arguably the biggest change in Entra ID authentication since mandatory MFA for administrative interfaces – and we have a PowerShell script to help identify the affected accounts. https://office365itpros.com/2026/07/14/entra-sms-one-time-code/SharePoint 2013 to 2026: Why Legacy Migrations Are Still the Backbone of IT
Technology moves fast, but enterprise systems rarely do. While organizations eagerly adopt cloud platforms, AI-powered tools, and modern collaboration solutions, many still rely on legacy systems that have quietly supported business operations for years. One of the most common examples is SharePoint 2013. https://dellenny.com/sharepoint-2013-to-2026-why-legacy-migrations-are-still-the-backbone-of-it/How to Identify Obsolete SharePoint Online Sites with PowerShell
Microsoft 365 has been around for many years, and it’s likely that a tenant has some obsolete SharePoint Online sites. The LastModifiedDateTime property is an unreliable basis to make the decision because background processing can update the property. This article explains how to identify obsolete sites based on usage data extracted from the Microsoft Graph. Combining the usage data with basic site properties taken from SharePoint creates a report that should help administrators to figure out what sites they should consider removing. https://office365itpros.com/2026/07/13/find-obsolete-sites/Make Your Test Data Less Boring with M365Mutator
Testing Microsoft 365 scenarios often involves test data. If the data is stale or always the same, it might not generate good results or help to identify lurking problems. The M365Mutator app helps to solve the problem by mixing things up in your test data. The app can change properties of Entra ID accounts, send email, update calendars, and generally make sure that whatever you’re testing has fresh information to run against. https://office365itpros.com/2026/07/10/m365mutator-test-data/Make Your Test Data Less Boring with M365Mutator
Testing Microsoft 365 scenarios often involves test data. If the data is stale or always the same, it might not generate good results or help to identify lurking problems. The M365Mutator app helps to solve the problem by mixing things up in your test data. The app can change properties of Entra ID accounts, send email, update calendars, and generally make sure that whatever you’re testing has fresh information to run against. https://office365itpros.com/2026/07/10/m365mutator-test-data/Announcing Microsoft 365 for IT Pros (2027 Edition)
The editorial team is happy to announce the publication of Microsoft 365 for IT Pros (2027 edition) eBook, the most comprehensive and up-to-date book covering tenant management. Previously named Office 365 for IT Pros and now spanning four books with the addition of Microsoft Purview for IT Pros and Power Platform for IT Pros, Microsoft 365 for IT Pros includes coverage of Exchange Online, SharePoint Online, Entra ID, Teams, Planner, and many other aspects of the Microsoft 365 ecosystem, including hundred of examples of using PowerShell and the Microsoft Graph to automate tenant operations. https://office365itpros.com/2026/07/01/microsoft-365-for-it-pros/Using Graph Delta Queries with Entra ID Groups
Delta queries are a Microsoft Graph mechanism to allow applications to query resources to find objects that have changed since a baseline was established. The technique is most useful for applications that need to synchronize a local store with online content. It’s not an appropriate method to use for reporting changes to Entra ID groups because knowing that an object changed doesn’t mean much by itself. https://office365itpros.com/2026/06/25/graph-delta-queries-entra-id-groups/What Is Agentic AI in Microsoft Ecosystem? A Deep Technical Explainer
Artificial intelligence has rapidly moved from simple automation tools to intelligent systems that can understand, reason, and perform complex tasks. The next major evolution in this space is Agentic AI. Traditional AI applications usually work by receiving a request, processing it, and generating a response. They are useful, but they depend heavily on humans to guide every step. https://dellenny.com/what-is-agentic-ai-in-microsoft-ecosystem-a-deep-technical-explainer/Entra ID Tightens Conditional Access Processing for Baseline Scopes
Microsoft is closing a gap in conditional access policies where apps that only request baseline scopes with at least one exclusion are not processed. The rollout has already started and should be finished by mid-August. For most tenants, the change shouldn’t be an issue, but it is possible that some apps are in use that fit the profile and cannot handle conditional access. If MC1223829 appeared in your tenant, it’s time to check. https://office365itpros.com/2026/06/19/baseline-scopes-ca/Microsoft Blocks Graph Access to Non-IPM Folders
An app written to fetch details of Copilot interactions from the TeamsMessagesData folder suddenly stopped working when the Graph refused to return items. The 403 forbidden error can’t be argued with. Fortunately, the aiInteractionHistory API fills the gap, even if the API does not return the full text of Copilot responses. That information is available, but you’ll need to use eDiscovery to get it. https://office365itpros.com/2026/06/18/copilot-interaction-app/Microsoft Tightens Security for Self-Service Password Reset
Microsoft plans to improve the security of the Self-Service Password Reset (SSPR) facility in September 2026 by requiring users to register at least one authentication method. SSPR will then use the registered authentication method to verify user accounts when changing passwords. The change aligns SSPR with user sign-ins and improves security by removing fallback on directory attributes, which might be altered by attackers. https://office365itpros.com/2026/06/17/sspr-authentication-methods/Microsoft to Delete Unlicensed OneDrive for Business Accounts
Microsoft will delete unlicensed OneDrive for Business accounts that aren’t paid for (to be archived) after July 2026. Up to now, it’s been possible to leave unpaid-for accounts linger in Microsoft 365 archive until retention policies and holds expire. Now, tenants must decide which accounts they wish to keep and pay for. Unpaid accounts will be removed, even if retention policies or eDiscovery holds apply to their content. https://office365itpros.com/2026/06/12/unlicensed-onedrive-for-business-2/Primer: Finding Sensitivity Labels with PowerShell
Three cmdlets exist to fetch sensitivity labels. One is in the Exchange Online module; the others are powered by Graph APIs. What are the differences between each method and how can you make sure that the set of sensitivity labels fetched by PowerShell is the full set of available labels? These and other questions are investigated in this article. https://office365itpros.com/2026/06/11/sensitivity-label-ps/
Recent Blogs
- SharePoint Online is introducing a new tenant-level setting that allows organizations to choose whether heading permalinks should appear on SharePoint pages.Jul 14, 2026
- 2 MIN READPowerPoint is getting easier to use with new SmartArt, fresh themes, a cleaner Design ribbon, and a more modern file open experience.Jul 13, 2026
