admin
647 TopicsNot For Profit Licence suddenly disappeared and then deleted
Hi All Have a big issue. Have a not for profit account for our charity. Renewed licence earlier in the year and all was ok and working. Then a few days ago I had reports of not being able to access data. After much hunting I found the below. Seems account was suddenly and without warning disabled and then reported as deleted a few days later. What do I do? I desperately need to recover the files that were on the associated teams? Any help would be much appreciated173Views0likes11CommentsLooking for Microsoft 365 best practices for a large dynamic company group
Looking for Microsoft 365 best practices for a large dynamic company group I'm a Microsoft 365 admin trying to figure out the best architecture for a company-wide group (100+ users) and I'm wondering if there's a better approach than what I'm currently doing. What I need I want a single company group that can: Automatically include users through dynamic membership Share SharePoint sites, files, OneDrive content, Teams resources, etc. Allow sending company-wide emails Allow sending required Outlook meeting invitations (not optional) Have moderation/approval for announcements, meeting invites, or posts Allow certain trusted users to bypass approval while everyone else requires approval Scale as employees are hired/terminated automatically Current setup Dynamic Distribution List Used for company-wide emails and Outlook meeting invites. Membership is dynamic using an Exchange recipient filter based on US users. Private Microsoft 365 Group Used for SharePoint, file sharing, and collaboration. Membership is dynamic through an Entra ID Dynamic Membership Rule. I had to use PowerShell to configure some permissions because the portal didn't support everything I needed. Problems I'm running into I now have two separate groups that should always contain the same people. The Dynamic Distribution List works well for email/meetings but doesn't provide SharePoint, Teams, or file collaboration. The Microsoft 365 Group provides collaboration but doesn't seem to support everything I need for company-wide communication. I haven't found a clean way to have approvers/moderators, while allowing a few designated people to post or send meeting invites without requiring approval. I also haven't found a good way to make Outlook meeting requests "required" from the sender side other than relying on attendees not changing their RSVP. My questions Is there a better Microsoft 365 architecture for this? Should I be using a Dynamic Distribution List, a Microsoft 365 Group, a Mail-enabled Security Group, Teams, Viva Engage, or something else? Is there a supported way to have dynamic membership + SharePoint + company email + moderated announcements/meeting invites all in one solution? How do large organizations typically handle company-wide communications while keeping membership automatic? Is maintaining two dynamic groups (one for collaboration and one for email) simply the recommended approach? I'd love to hear how other Microsoft 365 admins have solved this in production. Thanks!44Views0likes2CommentsMCA billing account stuck in "under review" status for 4+ days, no resolution
I'm the Global Admin for a Microsoft 365 tenant (domain: fortunamg.net) recently transitioned from a GoDaddy CSP reseller relationship to a direct Microsoft Customer Agreement (MCA) billing account. After setting up the MCA billing account and adding a payment method, I attempted to make an edit to my billing account address (updating to the new 9-digit zip code format). This triggered an "Account under review" status, which states the review usually takes up to 2 days. It has now been over 4 days with no update or email notification. This review is blocking me from purchasing a subscription, which I need to do to restore an active Microsoft 365 subscription on this tenant (currently showing as "Disabled" following the GoDaddy detach). Billing Account ID: 7793dd6e-68c9-5362-c5e2-3fe091b9854c Domain: fortunamg.net Could someone help check the status of this review or escalate to the appropriate team? Phone support has been unable to resolve this. Thank you.54Views0likes2CommentsSole Admin Locked out of Microsoft tenant -- MFA Error 500121
Sole Admin Locked out of Microsoft 365 Tenant- MFA Error 500121 using OTPKEY Im the original administrator of a Microsoft 365 Business Basic tenant for the City of Briarcliff. Tenant: mailto:email address removed for privacy reasons Admin Account: mailto:admin@briarcliffar.onmicrosoft I can succesfully enter the correct password, nut MFA verification fails with error code 500121. I have original microsoft 365 setup email showing the admin account The microsoft purchase receipt and Order ID. Access to billing email account Control of the cityofbriarcliff.gov domain through Cloudflare. The tenant was never fully configured beyond the initial setup process. I was able to sign in originally and reached the Connect and Configure your domain page but did not complete deployment. I need assisstance with recovery of the sole administrator account and MFA reset for tenant. I can provide provide proof of purchase, original setup email, billing information, and proof of control of cityofbriarcliff.govInherited group-based license service plan checkboxes are now editable but fail on save
Hello, We are observing a possible UI regression in the Microsoft 365 admin center related to group-based licensing. Environment / scenario: - Microsoft 365 admin center - User-level “Licenses and apps” screen - The user receives the Microsoft 365 license through group-based licensing - The source group is a Microsoft Entra dynamic security group - The license and service plan settings are intended to be controlled at the group-based license assignment level We understand that when a license is inherited from a group-based license assignment, the apps/services for that inherited license should not normally be changed directly at the individual user level. The service plan configuration should be managed at the group/license assignment level. However, the current UI behaviour is confusing. Observed behaviour: 1. Open a user in the Microsoft 365 admin center. 2. Go to the user’s “Licenses and apps” screen. 3. The user has a Microsoft 365 license inherited from a group-based license assignment. 4. Some app/service checkboxes appear to be enabled and editable. 5. An administrator can actually clear/uncheck those checkboxes. 6. However, when clicking OK/Save, the operation fails with an error. In other words, the UI allows an administrator to make a change that cannot actually be committed. The reason this looks like a regression is that the previous UI behaviour was different. Previously, when a user’s Microsoft 365 license was inherited from a group-based license assignment, the relevant app/service checkboxes on the user-level “Licenses and apps” screen were greyed out or effectively read-only. Administrators could visually understand that those service plan settings could not be changed directly at the individual user level. Recently, those same checkboxes appear to be active and editable. The administrator can uncheck them, but the change fails only after clicking OK/Save. From an administrator UX perspective, this is confusing because the UI appears to allow an unsupported operation and only rejects it at save time. Expected behaviour: If service plan settings for an inherited group-based license cannot be changed at the individual user level, we would expect one of the following behaviours: - The checkboxes should remain disabled/read-only from the beginning. - The UI should clearly state that these apps/services are inherited from a group-based license assignment. - The Save/OK button should be disabled for changes that cannot be applied. - The UI should provide a link or guidance to manage the setting at the group-based license assignment level. Questions: 1. Has anyone else observed this recent change in behaviour? 2. Was this UI change intentional? 3. Is this a known issue or known UX regression in the Microsoft 365 admin center? 4. Is there any scenario where these checkboxes are intentionally editable for a user who receives the license only through group-based licensing? 5. Does this behaviour differ depending on whether the source group is an assigned security group or a dynamic security group? 6. Is there any recommended administrator workflow when troubleshooting service plan settings for a user whose license is inherited from a group-based license assignment? To clarify, this is not a question about how group-based licensing works. The concern is specifically about the UI behaviour where inherited license service plan checkboxes were previously greyed out, but now appear editable even though the change fails on save. If this is not intentional, it would be helpful if the Microsoft 365 admin center could restore the previous read-only/greyed-out behaviour, or clearly explain in the UI why the change cannot be saved. Thank you.75Views0likes1CommentWhy is Microsoft 365 setup (Groups + SharePoint + Domains) still so complex?
Microsoft 365 Setup Feedback Summary Summary of Experience: Setting up two small business workspaces (Cork & Clarity and Stone Clarity Consulting) in Microsoft 365 required navigating multiple disconnected systems including the Admin Center, Outlook, SharePoint, and an external DNS provider. The process was significantly more complex than expected and not intuitive for a non-technical user. Key Issues Encountered: 1. Identity and Account Confusion - Unclear whether to create separate users or use one account with aliases - Creating multiple users caused login confusion, broken permissions, and access issues 2. Domain and DNS Setup Complexity - Required switching between Microsoft and external DNS (Looka) - Instructions were unclear and required manual troubleshooting - No clear distinction between required and optional DNS records 3. Default Domain Confusion - New groups defaulted to the wrong domain - No visible option to change domain during group creation - Required changing global default domain (non-intuitive) 4. Inconsistent Group Behavior - Outlook groups and Teams-backed groups behave differently - No indication of differences or consequences - Groups appeared in some places but not others 5. Membership and Ownership Issues - Group creator was not consistently added as member - Ownership did not always persist after changes - Groups existed but were inaccessible or invisible 6. Outlook UI Limitations - Groups not visible despite existing and being correctly configured - No clear instructions on how to 'activate' or 'follow' groups 7. SharePoint Site Not Created Automatically - SharePoint sites were not created when groups were created - Required hidden steps: Outlook → Files → Open in SharePoint - No indication that the site did not exist yet 8. SharePoint Discovery Issues - Sites do not appear until manually accessed or followed - No onboarding or guidance for discovering sites 9. Ghost/Deleted Items Still Visible - Deleted group (Cork & Clarity Hub) remained visible - No clear distinction between deleted vs followed sites 10. Fragmented User Experience - Required switching between multiple platforms - No single place to manage or understand setup status - High cognitive load for basic configuration Conclusion: While Microsoft 365 is a powerful platform, the initial setup experience is overly complex and fragmented, especially for small businesses. Simplifying group creation, making SharePoint provisioning automatic and visible, and improving UI consistency across apps would significantly improve usability and adoption.79Views0likes1CommentMC1269241 - Can't turn off antropic for agentmode
Hi, I’m trying to figure out how to turn off the new feature where Anthropic is enabled by default for everyone in the EU for agent mode in excel and powerpoint, as described in the Message Center news in the title. It is not possible to press Save when you have unchecked the setting unless you also consent to the terms of use, it is greyed out. Since we want the feature turned off, we do not want to agree to any terms of use. Has anyone found a solution? This seems to be misconfigured.115Views0likes2CommentsM365 only admin locked out MFA error 53003
I am learning this the hard way....so here it goes. Currently I am locked out of as the only admin on the tenant with error 53003. I was updating some Microsoft MFA default policy settings in Entra and mistakenly deleted the admin user from the exclusions list, and got locked out. Thankfully I have another tenant, not as big the one locked out. Initiated several support tickets for which everyone calls, and despite of subline mentioning the issue says that they have to assign this ticket to Entra. Then the ticket gets updated and noone has been assigned every since. I have initiated severity A support tickets from Azure portal but no one has called in last 24 hours to help. We area business with Business Premium licenses with over 20 users, and now completely locked out. I have looked almost everywhere online. There is no phone number that takes you to a support agent - PLEASE HELP........218Views0likes2CommentsMicrosoft Feedback Portal account issue
I changed my Microsoft email a year ago, and it updated everywhere other than the Feedback Portal. As a result, I get an error when I try to login, or do anything on the page. Microsoft account support's suggestion was to login to the Feedback Portal which is insane given I'm having issues accessing it. How can I get this issue resolved? I've got three separate support tickets now and they keep asking me to wait 24 hours to get the issue resolved. Can someone from the Feedback Portal team please contact me to resolve this? This is what Microsoft Support have said: "understand your frustration, and yes—this is an account‑related issue because the Feedback Portal is still tied to your old alias, which causes login conflicts and forces you out. Your Microsoft account itself signs in correctly, but the Feedback Portal is pulling outdated identity data that you cannot update on your own. Since you cannot access the Portal to submit feedback, directing you back there is not a workable solution. What you need is for Support to escalate this to the internal Identity/Feedback Platform engineering team so they can manually correct the outdated alias mapping on the backend. In this situation, the Feedback Portal and Tech Community teams are the ones who manage and maintain that specific platform. Because the issue appears on the Feedback Portal side—even though your Microsoft account is working normally—only their dedicated team can make the necessary corrections on their end. That’s why we are guiding you to connect with them through the links provided: https://techcommunity.microsoft.com/ or https://feedbackportal.microsoft.com/feedback. They will be able to review the portal‑specific account data and assist you further. I understand why this is frustrating. Since you’re unable to stay signed in to the Feedback Portal, I completely see why posting there isn’t possible for you. However, I do need to be transparent: I’m not able to escalate this issue directly to the Feedback Portal team, as they don’t provide internal escalation channels for us and only accept requests through their own platform."200Views0likes2CommentsDistribution List & Security Group
I need a group that is a distribution list (so we can send emails to members of the group) & a security group (so I can assign the group to intune policies). How do I accomplish this? I don't want to just create the security group as our memebers don't like to go to groups in Outlook to check for email, they rather have it in their inbox... TIA, J265Views0likes2Comments