Unable to access Office 365 admin account
Hi Team, I am the administrator of the domain of my organization xyz0.onmicrosoft.com. Unfortunately, I am currently unable to access it because I lost my phone, and I no longer have the Authenticator app. Additionally, I do not have a mobile number, or a recovery email associated with my account, making it challenging to regain access to my portal. On a positive note, I do have a personal account with the same email address, which I can access. I also remember the password for my business admin account. However, due to the loss of my mobile phone and the Authenticator app, I am unable to login as I don't have 2FA code. I urgently need your assistance because I need to migrate all my Rackspace emails to Microsoft. Please let me know what information or verification I require to confirm that I am the administrator of this account.. Thanks for your help.
Defender for Endpoint for Kiosks
Hello Hello I have Windows 10 machines,, where users sign in with a local ad account. This account is not synced to the cloud. The question is is there a way to onboard and license these machines to Defender for Endpoint? What license would satisfy this requirement? Thanks
FIDO2 enabled user receive "Protect your account"
We are having issues in two different scenarios with Azure MFA for users who use FIDO2 exclusively. It seems, any settings somehow still require Microsoft Authenticator. First scenario: Registering FIDO2 after the 14 days grace period When a user is created in Azure (either directly or on-prem sync, no difference here), the user has a 14 days grace period. During this period, configuring FIDO2 works flawlessly using a Temporary Access Pass (TAP). After the 14 days, the user logs in using the provided TAP to https://aka.ms/mysecurityinfo, starts the "Add sign in method", follows the steps for the FIDO2 key, once the key is confirmed and the user is redirected back to mysecurityinfo, Azure prompts for a "Additional information is required" and requires the user to register the Microsoft Authenticator app first. The only logs we see is that the user interrupted the MFA setup. We tried several browsers, normal or incognito mode, different users, nothing prevented this, except for configuring MS Authenticator first, then configuring FIDO2 afterwards. We deleted the MS Authenticator app for these users as it was only a workaround. Now these users seem to face the second scenario below. Second scenario: FIDO2 sign in prompts for a "Protect your account" - skippable for 14 days Users are able to sign in using the FIDO2, and immediately after, they are prompted a "Protect your account" window, which asks them to configure MS Authenticator again. They have the option to skip this for 14 times (not days). If we check the user's sign in logs, it shows Failure for the user satisfying the Conditional Access requiring MFA, which is rather unexpected because the user does in fact manage to sign in using the FIDO2 security key, and is able to access the resources when skipping the "Protect your account" request. We thought it may be App specific, but finally the users face this issue with different apps (Workday, Concur, MS Teams...) After asking Google, many articles point out this is related to Security Defaults. This is not our case, as we are using https://learn.microsoft.com/en-us/microsoft-365/business-premium/m365bp-turn-on-mfa?view=o365-worldwide&tabs=condit. The Conditional Access (CA) is enforcing an MFA of a custom Authentication Strength which includes the FIDO2 as one of the accepted options. The per-user MFA settings are configured to be Disabled for the affected users, as it is already enforced by the CA. The only setting that we have not modified yet is the Multifactor authentication registration policy which is set to Enabled - we cannot customise this as we have only P1 license (and we cannot find information if disabling this would later prevent us from enabling it afterwards due to missing license). As mentioned at the beginning, it seems there is somewhere a setting that expects everybody to use MS Authenticator for MFA regardless of what we configure, except if we disable MFA altogether (not gonna happen). Are there any other settings we should check or review or we can test? Thanks in advance.
I made a new microsoft 365 tenant and suddenly users appeared
Made a new Microsoft tenant account for a customer and few hours later suddenly there were several users on the list without being added? They include several no longer active users and old names for people(like maiden names for married women). The customer is currently using Google workspace and is transitioning to 365. Any idea why? And what happens if I just delete them all? Will they come back and haunt us again?
Missing users tab in 365 admin center
Hello all, I am having an issue where I need to retrieve files from a former employee's OneDrive within the 365 admin center, when I login to the left there is no users>active users tab available; is this feature not available or does it need to be added to my profile? Thank you
Admin Roles restrict for IT branch in Office 365 admin centre
i may need some advise regarding the Office 365 admin role can assign the IT Helpdesk admin for branch without see the HQ email users? Example: 1 HQ A Branch B Branch C branch Each branch have internal IT team. however those 3 branch all are using same domain like abchotels.com Would like to know can assign the A Branch with HelpDesk Admin role only manage to branch A Email Users ? B Branch Assign the help desk admin role only manage to B branch Email Users HQ IT Team manage to see everything ( using global admin ) Question: B Branch is not allow to see Branch A \ Branch C or HQ Email users in office 365 admin center. Thank you RayHow to- and impact of combining users in Microsoft 365
Hi, We have our domain "domain.com.ar" and bought the same domain name but with only ".com" ("domain.com") to operate in other countries. First we created a new users using the new domain because we didnt know the impact it will have in our business to change the mail address for old users. Now we want to merge them together. Our solution is to add "email address removed for privacy reasons" as alias and then set it as primary mail address, is that correct? So we need to delete the user we created to add it. And the problem is that we dont want to lose anything for those temporary accounts. -Users: tomas @ domain . com .ar -Temporary users: tomas @ domain . com We want to know How to merge them together and leave email address removed for privacy reasons as primary without losing anything from both users? Impacts this will have. Best regards, Tomas Cossara
