Recent Discussions
I built a free, open-source M365 security assessment tool - looking for feedback
I work as an IT consultant, and a good chunk of my time is spent assessing Microsoft 365 environments for small and mid-sized businesses. Every engagement started the same way: connect to five different PowerShell modules, run dozens of commands across Entra ID, Exchange Online, Defender, SharePoint, and Teams, manually compare each setting against CIS benchmarks, then spend hours assembling everything into a report the client could actually read. The tools that automate this either cost thousands per year, require standing up Azure infrastructure just to run, or only cover one service area. I wanted something simpler: one command that connects, assesses, and produces a client-ready deliverable. So I built it. What M365 Assess does https://github.com/Daren9m/M365-Assess is a PowerShell-based security assessment tool that runs against a Microsoft 365 tenant and produces a comprehensive set of reports. Here is what you get from a single run: 57 automated security checks aligned to the CIS Microsoft 365 Foundations Benchmark v6.0.1, covering Entra ID, Exchange Online, Defender for Office 365, SharePoint Online, and Teams 12 compliance frameworks mapped simultaneously -- every finding is cross-referenced against NIST 800-53, NIST CSF 2.0, ISO 27001:2022, SOC 2, HIPAA, PCI DSS v4.0.1, CMMC 2.0, CISA SCuBA, and DISA STIG (plus CIS profiles for E3 L1/L2 and E5 L1/L2) 20+ CSV exports covering users, mailboxes, MFA status, admin roles, conditional access policies, mail flow rules, device compliance, and more A self-contained HTML report with an executive summary, severity badges, sortable tables, and a compliance overview dashboard -- no external dependencies, fully base64-encoded, just open it in any browser or email it directly The entire assessment is read-only. It never modifies tenant settings. Only Get-* cmdlets are used. A few things I'm proud of Real-time progress in the console. As the assessment runs, you see each check complete with live status indicators and timing. No staring at a blank terminal wondering if it hung. The HTML report is a single file. Logos, backgrounds, fonts -- everything is embedded. You can email the report as an attachment and it renders perfectly. It supports dark mode (auto-detects system preference), and all tables are sortable by clicking column headers. Compliance framework mapping. This was the feature that took the most work. The compliance overview shows coverage percentages across all 12 frameworks, with drill-down to individual controls. Each finding links back to its CIS control ID and maps to every applicable framework control. Pass/Fail detail tables. Each security check shows the CIS control reference, what was checked, what the expected value is, what the actual value is, and a clear Pass/Fail/Warning status. Findings include remediation descriptions to help prioritize fixes. Quick start If you want to try it out, it takes about 5 minutes to get running: # Install prerequisites (if you don't have them already) Install-Module Microsoft.Graph, ExchangeOnlineManagement -Scope CurrentUser Clone and run git clone https://github.com/Daren9m/M365-Assess.git cd M365-Assess .\Invoke-M365Assessment.ps1 The interactive wizard walks you through selecting assessment sections, entering your tenant ID, and choosing an authentication method (interactive browser login, certificate-based, or pre-existing connections). Results land in a timestamped folder with all CSVs and the HTML report. Requires PowerShell 7.x and runs on Windows (macOS and Linux are experimental -- I would love help testing those platforms). Cloud support M365 Assess works with: Commercial (global) tenants GCC, GCC High, and DoD environments If you work in government cloud, the tool handles the different endpoint URIs automatically. What is next This is actively maintained and I have a roadmap of improvements: More automated checks -- 140 CIS v6.0.1 controls are tracked in the registry, with 57 automated today. Expanding coverage is the top priority. Remediation commands -- PowerShell snippets and portal steps for each finding, so you can fix issues directly from the report. XLSX compliance matrix -- A spreadsheet export for audit teams who need to work in Excel. Standalone report regeneration -- Re-run the report from existing CSV data without re-assessing the tenant. I would love your feedback I have been building this for my own consulting work, but I think it could be useful to the broader community. If you try it, I would genuinely appreciate hearing: What checks should I prioritize next? Which security controls matter most in your environment? What compliance frameworks are most requested by your clients or auditors? How does the report land with non-technical stakeholders? Is the executive summary useful, or does it need work? macOS/Linux users -- does it run? What breaks? I have tested it on macOS, but not extensively. Bug reports, feature requests, and contributions are all welcome on GitHub. Repository: https://github.com/Daren9m/M365-Assess License: MIT (free for commercial and personal use) Runtime: PowerShell 7.x Thanks for reading. Happy to answer any questions in the comments.
Conditional Formatting Duplicates in Two Columns
Hello, I have a spreadsheet where I track calls my office receives. I have a table that includes the date and name for each call. Sometimes calls are entered in the spreadsheet multiple times. I would like to create a conditional formatting formula that will flag if a name is entered twice in one day. Is there a way to highlight cells that are duplicated in two rows of a table? Thank you!SharePoint Online Clamps Down on Company-Wide Sharing Links
Company-wide sharing links allow any authenticated user account in a Microsoft 365 tenant to access a shared file or folder. New settings are available to create an expiration policy for company-wide sharing links, with different values supported for SharePoint Online and OneDrive for Business. The idea is to stop the potential for abuse of sharing links, including stale links that should not grant access to files and folders. https://office365itpros.com/2026/03/12/company-wide-sharing-links-limits/
SMS code is not sent due to blocking
Hi! Sorry, I was using a translator to write this thread. About two weeks ago, I lost access to my Microsoft account. I haven't forgotten my password, and I haven't logged in from a new device—the system simply decided something was wrong and decided to send me an SMS code to verify my identity. I currently live in Russia and have a Russian SIM card. My government has blocked receiving SMS codes from foreign companies (WhatsApp, Telegram, Microsoft, etc.). I enter the last four digits of my phone number and click "Send Code," but then it says "This feature is currently unsupported." I've submitted recovery forms numerous times, but the account is very old and some of the information has simply been lost! I was barely able to contact a live person from Xbox support, and they opened a service request for recovery. The operator handling my issue completely ignores my messages. The only response he gave was that the form I sent him by email couldn't confirm my identity. He didn't even notice that I just needed a security code for the email address I used to REGISTER the account, as I couldn't receive an SMS code due to the political situation in my country. Today, I contacted a real Microsoft employee again, and he told me to write here because engineers often respond to messages and they can send me the code by email. Please help me. This account has no material value other than a copy of Minecraft. This account is precious as a memory and something that helped me through an important period in my life. Thank you for reading this thread.Request for Best Practices on Using Microsoft Agent 365
Hello Community, I am seeking guidance on best practices for effectively using Microsoft Agent 365. Specifically, I am interested in recommendations related to governance, security and access control, agent monitoring, and integration with Microsoft 365 services. If you have practical experience or proven approaches in these areas, your insights would be greatly appreciated. Thank you, Mohammad Shohal Bhuiyan
Correlation Study with Filters
Dear Experts , I have a data like below( Attached worksheet) And want study the correlation between SNR[0~3], there will be 6 combinations as below:- I want make like this but with Filters/Slices for the "File.Name" & "SSB or TRS" & "Carrier Index", different colors for different Carrier Index(0 &1) Thanks & Regards Anupam ShrivastavaMicrosoft 365 Backup Launches File-Level Restore
The Microsoft 365 Backup solution will soon be able to restore individual files and folders instead of complete sites. That’s a welcome upgrade to restore capabilities to cover situations like the inadvertent deletion of a file. It’s a wonder why Microsoft didn’t make more about this capability when they celebrated SharePoint’s 25th anniversary last week when they discussed departmental billing for Microsoft 365 Backup. https://office365itpros.com/2026/03/11/microsoft-365-backup-file-restore/
Python in Excel - Missing from desktop Excel but exist in web Excel
Good Morning! Yes, again this topic :-( When I join to a professional forum I also search for the topic I having a problem with. Found a lot of similar questions but I could not find a post with a solution. Maybe I was not enough attentive and patient but I did not. Well, we are a University in Hungary, and we have Microsoft 365 A1, A3 and A5 licenses. I attahced a screenshot which shows: in the desktop Excel I got #CALC! error msg when I type =PY and press TAB. But it works in Excel on the Web version. So the root of the problem cannot be the license, right? Of course I saw this article about "Python in Excel availability": https://support.microsoft.com/en-us/office/python-in-excel-availability-781383e6-86b9-4156-84fb-93e786f7cab0 Our licenses are based on user, not device so no, it cannot be that the computer is a device with shared license: My Excel version is on: So the version and the channel are also OK. (OK?) I am also a Global Adminisitrator in our tenant, so I could check if the Connected experiences and Optional connected experiences and all related possibilities are disabled or not: no, it is not disabled. On "Microsoft 365 Apps admin center" : https://config.office.com/ ... I did not find any policies which controls those options so in "Policies for all users" policy I modified all these settings from "Not configured" to "Configured" and "Enabled". In my Excel the Trust center related settings looks like this: Of course my Office package up to date, I ran the Update Office and Update License command from Excel. Did not help. I went also to https://admin.microsoft.com site if I can find any related setting, but did not. I also tried to Sign out and Sign back in Excel - did not help. Finally, as our computers are in Hybrid environment (so our users are logging in inti on-prem AD, and their properties are synchronised to Azure) I have cerated a Group Policy object (I am also a Domain Admin), which also allows connected and optional experiences for all domain users: I should not mention: did not help :-( I have checked if the GPO is applied or not by running GPRESULT /R, it applied, it is in the registry. But despite all the settings so far - nothing helped. The Python in Excel feature in desktop Excel do not want to work. But it does in web based Excel. I would be very happy to receive any ideas from anyone. Or if U say I should go to official Microsoft support, then I go. Have a nice day! Regards, Andras /sorry for the very detailed case description, but maybe easier and quicker if I "aswer" all usual questions in advance/
3044 error in Access
I have two computers networked Windows 10 together and have moved to two new computers windows 11. I have also moved from Microsoft 365 to 2024 office professional plus. Everything seems to work on the new computers except one Access database. That file has a front and back built in. I get a 3044 run error and the data base will not open. The error says it can not find the data base. I think in the transfer the old computer may have a different name than the new, It appears that is the problem. In the network I can see both new computers, it seems they are set up correctly but that could be a problem as well. I simply do not know how to fix it. I hope someone here may have a solution.
Excel file problem
When I download an Excel file from iCloud (on my Mac laptop), I get a message saying: "We found a problem with some content in the file. Do you want us to try to recover as much as possible? Click "yes" if you trust the source of this workbook." I click yes, but the file then opens in a corrupted or unusable state. How can I retrieve the original file as it was before? Please recommend a solution.Transitioning from Barracuda to Office 365 for Modern Email Management
Migrating from Barracuda to Office 365 is a strategic step for organizations looking to modernize their email infrastructure and improve collaboration. Many businesses use Barracuda for email security, archiving, or backup, but moving to Office 365 allows them to consolidate these capabilities within a single cloud-based productivity platform. Office 365 offers advanced email services through Exchange Online along with collaboration tools like Outlook, Teams, OneDrive, and SharePoint. The migration process typically involves transferring archived emails, mailboxes, and user data from Barracuda systems into Office 365. Careful planning is required to ensure data integrity, maintain compliance requirements, and avoid disruptions to daily communication. During the migration, administrators map user accounts, validate domains, and verify that all archived data remains accessible after the transition. One of the major advantages of moving to Office 365 is the enhanced security and management capabilities. Businesses gain access to features such as advanced threat protection, data loss prevention, and centralized administration. These tools help organizations protect sensitive information while simplifying IT management. For companies planning this transition, working with experienced providers can help ensure a smooth process. Many organizations rely on Apps4Rent to support Barracuda to Office 365 migrations, ensuring secure data transfer, minimal downtime, and reliable access to Microsoft 365 services after the migration is complete.Moving from Kerio to Office 365 for Modern Email and Collaboration
Migrating from Kerio to Office 365 is a practical step for businesses looking to upgrade their email and collaboration infrastructure. While Kerio Connect provides basic email, calendar, and messaging capabilities, Microsoft Office 365 offers a comprehensive cloud-based platform that includes Outlook, Exchange Online, Teams, OneDrive, and SharePoint. This transition enables organizations to benefit from enhanced productivity tools and improved communication across teams. During a Kerio to Office 365 migration, essential data such as emails, contacts, calendars, and folders are transferred from the Kerio server to Exchange Online. The process typically involves configuring Microsoft 365 accounts, securely migrating mailbox data, and updating DNS records to ensure uninterrupted email delivery. Careful planning helps minimize downtime and ensures that users maintain access to their information throughout the migration. Another key advantage of moving to Office 365 is improved security and scalability. Microsoft provides advanced protection features such as spam filtering, multi-factor authentication, data loss prevention, and built-in compliance tools. These capabilities help organizations protect sensitive information while meeting modern security standards. Businesses often rely on experienced providers like Apps4Rent to manage Kerio to Office 365 migrations efficiently. With expert planning and support, organizations can ensure a smooth transition, maintain data integrity, and fully leverage the benefits of the Microsoft 365 ecosystem.Why is my create file from OneDrive for Business node isn't working?
I have a power automate cloud flow that, in some point, gets a word .docx from my sharepoint site, then it creates the same document in onedrive so that I can convert it to PDF then returns it to sharepoint. This idea came from the necessity of converting a .docx to .pdf without the need of premium conectors. I have 2 scenarios: 1° Scenario: Flow: I get the data from the word that I need > I create the same file on OneDrive > I convert the file to .pdf > then I create the file on Sharepoint. Problem: When I run my flow, it gets a 404 error: "message": "File Not Found\r\nclientRequestId: y-f695-48b1-9556-xc\r\nserviceRequestId: x-e051-b000-efc3-y" Error image: 2° Scenario: Flow: The same as the above, the only thing I did after research, is that the node that I get content from file from my sharepoint site also returns the "$content-type", so I specified that for the create file from OneDrive I'll only want the "$content" attribute. In resume, it creates the file in onedrive but I can't open it, it appears to be corrupted, at first I thought my sharepoint file was also broken, but then I could open it with no errors as on OneDrive. Problem: When I run my flow, it gets the error that it can't convert that kind of file (as I wrote above, the file creates corrupted), the main problem is understanding why it gets corrupted, it even returs the content-type that I'm not passing anymore. Error image: Message: "message": "Error from microservice: {\"status\":406,\"message\":\"Não há suporte para a conversão desse arquivo para PDF. (cannotOpenFile / Error from Office Service. Url=https://wordcs.officeapps.live.com/document/export/pdf HttpCode=BadRequest)\",\"source\":\"api.connectorp.svc.ms\"}\r\nclientRequestId: y-13f3-4e1a-a77a-x\r\nserviceRequestId: y-a09f-b000-f272-x" NB: This flow actually worked for more than 1 year with no problems like that, the last time it ran without errors was last week (6-7 days from today).How to Remove Sensitivity Labels from SharePoint Files at Scale
It’s easy to remove sensitivity labels from SharePoint Online files when only a few files are involved. Doing the same task at scale requires automation. In this article, we explain how to use the Microsoft Graph PowerShell SDK to find and remove sensitivity labels from files stored in SharePoint Online and OneDrive for Business. https://office365itpros.com/2026/03/10/remove-sensitivity-labels-from-file/
What causes downtime or server errors for websites hosted on Microsoft Azure?
Websites hosted on Microsoft Azure may experience downtime due to configuration errors, traffic spikes, or limited server resources. For example, if AH Bonus faces hosting issues, it could be caused by high traffic exceeding CPU or RAM limits. Misconfigured deployment settings or incorrect database connections can also trigger server errors like 500 or 503. Additionally firewall or security rules may block access. To resolve this for https://bonus-ah.nl/, monitor performance in Azure enable autoscaling review logs optimize database queries, and check network security settings to ensure stable website performance and reduce downtime.Should be easy...... Open a form to a specific record
I have a form with rows showing individual audit for staff members. Each audit would be individualized by an Autonumber ID field. I want the user to be able to click on the ID field, have it close the form, and open another form on that specific record. Both forms are based on the same underlying table. The VBA I'm trying is the following: Private Sub ID_Click() DoCmd.OpenForm "Case_Notes", acNormal, "[ID] = " & Me!ID DoCmd.Close acForm, Me.Name, acSaveNo End Sub It does open the other form, close the form the user is clicking from, but it does not go to the ID number I click. For example, I click on ID 3, and the other form opens on ID 2. Any help would be greatly appreciated! Let me know if you have questions that I haven't clarified.
Events
Learn more about the capabilities of Agent 365 in this live 'Ask Microsoft Anything' with product and engineering team experts! Get your questions answered about capabilities for agent observability,...
Online
You’re passionate about what you do, and we’re passionate about empowering your potential. Microsoft 365 Community Conference - is your chance to keep up with AI, build game-changing skills, and take...
In-Person
Recent Blogs
- Technology is evolving at a startling rate, and it’s no longer enough for an organization to maintain their security measures, they must evolve along with it. Don’t let your data, employees, or clien...Mar 12, 2026
- Microsoft MVPs and influencers are posting helpful content for IT and Security admins who want to learn more about Microsoft Agent 365. We've selected a few favorites to get you started.Mar 12, 2026
