Using Cloud sync to sync AD to existing Entra Accounts
I want to sync in premise AD accounts with existing Entra accounts. The email on both accounts is the same, and I added the Entra/o365 suffix to the domain and set the UPN to that suffix, making both UPN(s) the same. It did not sync. It created a NEW Entra account. I thought I covered all my bases. How can I get on premise AD and existing Entra accounts to sync? thank youSharePoint Showcase: How Microsoft uses Copilot in SharePoint, and how you can get started
For this month's SharePoint showcase, we're zooming in on AI skills in Sharepoint and real Microsoft use cases for Copilot in SharePoint. We're also introducing a new "Product Drops" standing section to recap all the new GA functionality across the platform each month. As always, would love to hear from you in the comments. Let's get into it!
Are Microsoft partners using the Business Process Catalog? Looking for real-world adoption insights
Hi community, I'm curious to hear from Microsoft partners about your experience with the Business Process Catalog (BPC)- Microsoft's structured library of end-to-end business processes for D365 implementations. Specifically, I'd love to understand: Are you actively using the BPC in your D365 engagements? If yes, how and where does it fit into your delivery methodology? If not, what's holding adoption back — awareness, tooling, client readiness, or something else? We're seeing increasing attention on BPC as a foundation for structured implementation approaches, and I'm interested in how partners are (or aren't) integrating it into their practice. Would love to hear honest takes from the field. -Ellie
Group-Based Licensing (E3 → Business Premium): MutuallyExclusiveViolation – Months Unresolved
We operate a Microsoft 365 environment with Entra ID, Intune, and Exchange Online. For months, we have been dealing with a critical issue that remains unresolved to this day — despite an active Microsoft Support ticket. The Technical Problem: During the migration of approximately 87 user accounts from Microsoft 365 E3 to Business Premium (SPB) via group-based licensing in Entra ID, all affected accounts receive a MutuallyExclusiveViolation error. Microsoft's backend treats E3 and Business Premium as mutually exclusive, blocking the SPB assignment — despite sufficient licenses being available. A sequential approach (removing E3 first, then assigning Business Premium) is not an acceptable solution: a test run proved that this causes a complete loss of Exchange Online access. For a rollout across 87 productive user accounts, this is not viable. What is required is a seamless, atomic license swap at the backend level — exclusively via group-based licensing. The Support Problem: Two support engineers assigned — zero technical progress. Instead of a substantive solution, we received standard documentation steps that do not address the actual problem. A false resolution notice was issued — the issue had demonstrably not been resolved. Our own PowerShell tests (Get-MgUser, Get-MgSubscribedSku) and CSV exports from the Entra ID portal disproved this conclusively. Committed updates from the Engineering Team were not delivered. Instead, automatically generated follow-up emails were sent with no substantive relation to the ongoing case. An additional unexplained behavior: a test user appears in the error report of a license group they were never added to — a further backend inconsistency that has not been investigated. Current Status: The ticket has been open for months. 87 user accounts cannot be migrated to Business Premium. An escalation to the Team Manager has been initiated. No resolution is in sight. My Question to the Community: Has anyone experienced a similar issue with MutuallyExclusiveViolation in group-based licensing (E3 → Business Premium)? Is there a known workaround or an official Microsoft statement on this? Ticket Reference: #2604241410000669Limiting Microsoft 365 Copilot data exposure risk with Zero Trust apps and data controls
Learn how to reduce Microsoft 365 Copilot data exposure risks by governing what Copilot can reach after a user is authenticated. This post maps key Layer 2 risks to Zero Trust apps and data controls, including oversharing reduction, sensitivity labeling, DLP, connector governance, audit visibility, and privileged access management.
