Primer: How to Use RBAC for Applications to Control App Use of the Mail.Send Permission
The temptation to use the Mail.Send application permission in scripts can lead PowerShell developers into trouble because the permission allows access to all mailboxes, including sensitive executive and financial mailboxes. Fortunately, RBAC for Applications allows tenants to control the access that apps have to mailboxes and other Exchange content. All explained here with an example script to test RBAC of Applications. https://office365itpros.com/2026/02/17/mail-send-rbac-for-applications/
My microsoft account got hacked: Need actual support (Not copy and pasted ones)
My account got hacked, i dont know how but im sure 2fa is turned on and hackers still got in. I dont understand why there wasnt any emails about it going through my email that someone logged in in my microsoft account. I had things connected to that account such as school and some game like minecraft. Currently my java minecraft is non existence and is deleted from minecraft forever because i cant find it in namemc, but my xbox gamer tag is still alive so it also confirms that it indeed had an association with my account before. The hacker changed the email of my account that cause my email to be non-existence in the microsoft system. (This is very huge flaw of microsoft, i hope before we do any changes in the account, it is first confirmed in the email address if this email should really be added to that microsoft account) But i do have evidence that it was indeed associated with it before the hacker change the email and its even confirmed by microsoft website, i also got the full email of the hackers email that was used on my account. I tried everything from contacting support to the account recovery form. But nothing works, i tried cursing the fake email of the hacker that was currently occupying my account, but recieved no response. I am in dilema on what to do now, this account has been with me ever since my email was created. I just hoped that i get it back, i could provide evidences. But its been getting ignored apparently.
Shared OneDrive for Charity Management Team
We are a small charity running a Village Hall in the UK. A few of the trustees form a Business Team that run the hall day to day. All of these have Office 365 personal or family subscriptions to use word outlook etc on their own laptops. The charity itself has Office 365 Business Basic Grant subscription. This give us Exchange email, OneDrive, Teams and SharePoint plus a few other bits. We currently store all our charity documentation on a free 15Gb OneDrive dating back to SkyDrive when first adopted. Each member of the team has their own charity Microsoft account and email e.g. email address removed for privacy reasons or email address removed for privacy reasons etc, etc. I want to migrate this data onto an Office 365 Business OneDrive that is shared with this Business Team Here's the rub. As most users have a personal subscription and data saved on their own OneDrive keeping the two separate is problematic. Because Microsoft credentials are so tightly integrated between the OS and Office if they try and sign in to the existing OneDrive it takes them to their own private OneDrive. To work around this they have to use an Incognito browser session in order to log in. I am aware you can create a shared OneDrive for teams as described https://support.microsoft.com/en-gb/office/create-a-new-shared-library-from-onedrive-for-work-or-school-345c8599-05d8-4bf8-9355-2b5cfabe04d0 which should allow them to access this OneDrive by using their own credentials as above (email address removed for privacy reasons etc) but if they log in to this shared OneDrive once, and on the prompt that comes up at log in select "Stay logged in", can they keep visiting the site without logging in again and will they then have to use an incognito browser session to access their own personal OneDrive? Sorry this is so complicated but its been a nightmare trying to keep this working Many thanks John
Microsoft 365 Copilot Bought on Play Store not Received
I bought MS 365 Copilot from Play Store. When Google Play Store couldn't deducted my sub from my primary payment method (from Country A), they used my backup payment method (from Country B) - which wasn't a problem for me. The money was deducted and still appears on my play store subs. However, my MS Account does not show any MS 365 Copilot subscription, which effectively means that I can't use the service. What's frustrating is I'm now being tossed around the two companies. Play Store says I should contact MS Team (devs of MS 365 Copilot) while MS Team doesn't reply to my emails sent to the emails on their Play Store app page. I tried regional phone numbers and I'm referred back to MS Team. I'm now left with no money and without the service that I've paid for. Anyone who knows how I can resolve this. I tried Play Store refund and they said my purchase does not qualify for a refund citing their policy. Additional Context: My account is registered in Country A, together with my primary payment method. My backup payment method is from Country B). I signed up for the trial version intending to buy. So, it's me not anyone else who purchased on my behalf. The transaction appears on my Google Play account and I've no problem with that. The challenge is: My money is gone, I’ve no access to the service for which the money was deducted. What frustrates more is all emails from Google Play team were sent through no-reply emails. So, effectively, I can't contact them back to clarify the challenge I'm facing. On the other hand, Microsoft team is unreachable. I sent several emails and none was replied. Worse, one of the emails on their Play Sore page returns: email does not exist... Until now, the product isn't on my MS account but appears on my Google Play account. The reason I'd tried the refund route was to get the money back so I can purchase an alternative service or retry with my primary payment method. It wasn't because I thought someone had purchased by mistake. Here is my MS Account subscription site showing expired sub Here is my Play Store showing my active sub: Has anyone had a similar challenge. If so, how was it resolved.
Testing the MCP Server for Enterprise
The MCP Server for Enterprise is one of a set of preview servers released by Microsoft to show how MCP servers can help Microsoft 365 tenants get real work done. I’m sure things will improve, but the current state of the preview is that it can do a splendid job to answer simple questions, but once things get more complex, don’t depend on any of the PowerShell code the server generates. https://office365itpros.com/2025/12/11/mcp-server-for-enterprise/Third-party access via Organisational Link
Hi, Previously when logging into my personal account on a Web Browser, it flashed up with what is the typically an organisational message about an IT administrator. After being ping-ponged back and forth from the Microsoft Support teams, it's been suggested there is an organisational link with my personal email account, which absolutely should NOT be the case. My concern is if someone has linked my email with an organisational account, then they are privy to a lot sensitive information from personal finances to healthcare (this has also correlated with some odd behaviour on certain devices). The agents that I have spoke to have not yet provided me with a viable solution to removing any links to an organisational account, nor getting a list of any organisations or entities that have been linked to my personal account. Does anyone have any ideas as to a way around this? Many thanks.
Account blocked
My account has been blocked and when I try to reset my password and do the verification with my phone number, it says it isnt available. I then put in a different email to send the code too and I have filled out the recovery form but it has rejected me, even though, I put all the correct information in. I have tried over and over. Everything comes in to that email so I really need access back for work purposes as well as private. Please can someone help me as I cant speak to a customer support agent!
