User Profile
VasilMichev
MVP
Joined Jun 23, 2016
User Widgets
Recent Discussions
Re: Microsoft Purview to detect passwords
There's a built-in SIT for passwords, see https://learn.microsoft.com/en-us/purview/sit-defn-all-creds This should cover not just user credentials, but also API keys, client secrets and so on. Just be ready to handle lots of false positives :)10Views0likes0CommentsRe: How to explicitly state an external org is trusted
I think this is the expected behavior when you allow all external domains. See this article for more info: https://learn.microsoft.com/en-us/microsoftteams/trust-indicators From the table therein: Appears when the user is Tooltip shown on hover or profile card Outside of your organization and your organization has allowed communication from all external domains. Learn more about external access settings. "This person’s org hasn't yet been added to your org's trusted list."60Views0likes0CommentsRe: 'Registering user becomes local admin on Joined Devices' - WHAT
They are added as local admin on the device, not in Entra/M365. In other words, they will be added to the Administrators local group on the machine they performed the join with (you can confirm this under Local Users and Groups > Groups > Administrators). Nothing else.40Views0likes0CommentsRe: Customizing Participant Data in Teams Meetings
That's only possibile for webinars, afaik. See this article for the required policy settings: https://learn.microsoft.com/en-us/microsoftteams/set-up-meeting-registration And this one for the client-side setup: https://support.microsoft.com/en-us/office/manage-webinar-registration-in-microsoft-teams-923f382a-0cca-433a-b38d-7461971192d123Views0likes0CommentsRe: How to identify users handling SITs before purchasing Microsoft Purview licenses?
A single license should be fine for Content explorer, there is no requirement for the users themselves, afaik. Trial should also be fine, but you will of course lose access to the tool once it expires (aggregated data should still be collected though). It goes without saying that any licensing-related questions should be addressed to Microsoft, as nobody here is authorized to quote them.44Views1like1CommentRe: Finding Forwards based upon to address
There are various forms of forwarding and if you want the solution to be thorough, you have to account for all of them. I have a sample script here: https://michev.info/blog/post/4466/report-on-microsoft-365-mailbox-forwarding-all-methods-via-powershell An easier approach might be to take a look at the Auto-forwarded messages report in the Exchange Online admin center: Auto forwarded messages report in the new Exchange admin center (EAC) in Exchange Online | Microsoft Learn Lastly, you can run a message trace against one of the addresses in order to see how the message was delivered to them: https://learn.microsoft.com/en-us/exchange/monitoring/trace-an-email-message/message-trace-modern-eac39Views0likes0CommentsRe: App-only authentication for unattended scripts in MicrosoftPlaces
The underlying Places API has limited support for application permissions, mostly the READ methods are what's supported. If you meant this as a feature request, the best place to put it is over at the Feedback portal: https://feedbackportal.microsoft.com/feedback/forum/ebe2edae-97d1-ec11-a7b5-0022481f3c8065Views0likes0CommentsRe: How long are kept onlineMeetings data (main teams data, attendanceReports)
As mentioned in the documentation: The expiry time for online meetings is set to 60 days after the meeting's start or end time. If the meeting is updated or activated before it expires, the expiry time will be extended by another 60 days.22Views0likes0CommentsRe: Mail retention - storage of potential duplicate Data
There is no 90% threshold, not sure where you got that from. Messages that are deleted from the main mailbox end up in the Recoverable items subtree and are kept there for the duration of any holds affecting them. When the mailbox has an Online archive, a retention tag is automatically applied to the Recoverable items, moving items older than 14 days to the Recoverable items subtree within the archive. So in effect, you still get space in the main mailbox freed up, after a while. Said tag also ensures that the Recoverable item subtree, which has its own quota independent of the "user" quota, does not get filled up with deleted items. Effectively, with the Online archive you get an extra 100GB quota for the main mailbox and 100GB for the Recoverable items (well 30GB by default, but it changes to 100GB when holds are in play). While less common, you can end up with scenarios where the Recoverable items reaches its quota, thus preventing any item deletions. So having that extra quota helps. This article gives you more detail on how the Recoverable Items construct works: https://learn.microsoft.com/en-us/exchange/security-and-compliance/recoverable-items-folder/recoverable-items-folder After a hold expires, items held within the Recoverable items subtree "age out" and are permanently deleted (cannot be recovered anymore). Items that remain in the "main" mailbox will only be affected if you configured a "retain for XXX days and delete" type of tag - no automatic deletion happens unless an admin takes action to enable it.28Views0likes0CommentsRe: Mail retention - storage of potential duplicate Data
They aren't, who says they are? Archiving does work just fine for retention scenarios, it will free up space in the primary mailbox, including within the recoverable items subtree. Same goes for deleting items, as they will eventually end up in recoverable items and then moved to the associated structure in the archive mailbox.119Views0likes2Comments
Recent Blog Articles
No content to show