M365 Business Standard renewal surprise: new subscription required!
Hi all, I wanted to share a recent experience in case it helps other Microsoft 365 admins. For many years, I have renewed several Microsoft 365 Business Standard subscriptions by purchasing annual product keys through the Microsoft eCompany Store and redeeming them in the Microsoft 365 Admin Center using the Extend end date workflow. This year, the renewal process suddenly stopped working. Symptoms When redeeming a newly purchased Microsoft 365 Business Standard key, the Admin Center displayed: "The product key you've entered can't be applied to this subscription. Instead, use this product key to add licenses to a new subscription." At first glance, this made no sense because: The existing subscription was Microsoft 365 Business Standard. The newly purchased product was also Microsoft 365 Business Standard. The purchase source was the same Microsoft eCompany Store that had been used previously. The renewal process had worked successfully for years. I initially suspected: Region mismatch Billing platform changes Subscription corruption Invalid product keys None of those turned out to be the cause. Investigation A few interesting findings: The subscription was still under MOSA (Microsoft Online Subscription Agreement). The keys were valid and recognized by Microsoft. The same behavior occurred with multiple Business Standard subscriptions. Redeeming from a US IP address vs. a non-US IP address made no difference. After multiple support escalations, Microsoft eventually confirmed that the behavior is by design. Root Cause (per Microsoft Support) Microsoft advised that although the product name is still Microsoft 365 Business Standard, the newly purchased keys belong to a different offer variant than the existing subscription. As a result: The keys are valid. The subscription is valid. However, the new keys cannot extend the existing subscription. The keys can only be used to create a new subscription. In other words, two products can both be called Microsoft 365 Business Standard while still being considered different offers internally. Workaround The Microsoft-recommended workaround was: Redeem the new product keys using Create Subscription. A new Microsoft 365 Business Standard subscription is created in the same tenant. Reassign users from the old subscription to the new one. Allow the old subscription to expire. The existing tenant, users, mailboxes, OneDrive, SharePoint, Teams, domains, etc. remain unchanged. Only the underlying subscription providing the licenses changes. Feedback The frustrating part was not the technical workaround. The issue was that there was no obvious indication prior to purchase that a Business Standard key purchased today would not be able to extend a Business Standard subscription that had historically been renewed using identical-looking keys from the same source. The eventual answer from Microsoft was reasonable, but it took over a week, multiple escalations, and considerable investigation to determine that the behavior was actually expected. Question for the community Has anyone else encountered this recently with: Microsoft 365 Business Standard eCompany Store purchases MOSA subscriptions Retail/prepaid product-key renewals I'm particularly interested in whether others have seen this offer-compatibility issue and whether future renewals of the newly created subscription behave normally. Thanks!I built a free, open-source M365 security assessment tool - looking for feedback
I work as an IT consultant, and a good chunk of my time is spent assessing Microsoft 365 environments for small and mid-sized businesses. Every engagement started the same way: connect to five different PowerShell modules, run dozens of commands across Entra ID, Exchange Online, Defender, SharePoint, and Teams, manually compare each setting against CIS benchmarks, then spend hours assembling everything into a report the client could actually read. The tools that automate this either cost thousands per year, require standing up Azure infrastructure just to run, or only cover one service area. I wanted something simpler: one command that connects, assesses, and produces a client-ready deliverable. So I built it. What M365 Assess does https://github.com/Daren9m/M365-Assess is a PowerShell-based security assessment tool that runs against a Microsoft 365 tenant and produces a comprehensive set of reports. Here is what you get from a single run: 57 automated security checks aligned to the CIS Microsoft 365 Foundations Benchmark v6.0.1, covering Entra ID, Exchange Online, Defender for Office 365, SharePoint Online, and Teams 12 compliance frameworks mapped simultaneously -- every finding is cross-referenced against NIST 800-53, NIST CSF 2.0, ISO 27001:2022, SOC 2, HIPAA, PCI DSS v4.0.1, CMMC 2.0, CISA SCuBA, and DISA STIG (plus CIS profiles for E3 L1/L2 and E5 L1/L2) 20+ CSV exports covering users, mailboxes, MFA status, admin roles, conditional access policies, mail flow rules, device compliance, and more A self-contained HTML report with an executive summary, severity badges, sortable tables, and a compliance overview dashboard -- no external dependencies, fully base64-encoded, just open it in any browser or email it directly The entire assessment is read-only. It never modifies tenant settings. Only Get-* cmdlets are used. A few things I'm proud of Real-time progress in the console. As the assessment runs, you see each check complete with live status indicators and timing. No staring at a blank terminal wondering if it hung. The HTML report is a single file. Logos, backgrounds, fonts -- everything is embedded. You can email the report as an attachment and it renders perfectly. It supports dark mode (auto-detects system preference), and all tables are sortable by clicking column headers. Compliance framework mapping. This was the feature that took the most work. The compliance overview shows coverage percentages across all 12 frameworks, with drill-down to individual controls. Each finding links back to its CIS control ID and maps to every applicable framework control. Pass/Fail detail tables. Each security check shows the CIS control reference, what was checked, what the expected value is, what the actual value is, and a clear Pass/Fail/Warning status. Findings include remediation descriptions to help prioritize fixes. Quick start If you want to try it out, it takes about 5 minutes to get running: # Install prerequisites (if you don't have them already) Install-Module Microsoft.Graph, ExchangeOnlineManagement -Scope CurrentUser Clone and run git clone https://github.com/Daren9m/M365-Assess.git cd M365-Assess .\Invoke-M365Assessment.ps1 The interactive wizard walks you through selecting assessment sections, entering your tenant ID, and choosing an authentication method (interactive browser login, certificate-based, or pre-existing connections). Results land in a timestamped folder with all CSVs and the HTML report. Requires PowerShell 7.x and runs on Windows (macOS and Linux are experimental -- I would love help testing those platforms). Cloud support M365 Assess works with: Commercial (global) tenants GCC, GCC High, and DoD environments If you work in government cloud, the tool handles the different endpoint URIs automatically. What is next This is actively maintained and I have a roadmap of improvements: More automated checks -- 140 CIS v6.0.1 controls are tracked in the registry, with 57 automated today. Expanding coverage is the top priority. Remediation commands -- PowerShell snippets and portal steps for each finding, so you can fix issues directly from the report. XLSX compliance matrix -- A spreadsheet export for audit teams who need to work in Excel. Standalone report regeneration -- Re-run the report from existing CSV data without re-assessing the tenant. I would love your feedback I have been building this for my own consulting work, but I think it could be useful to the broader community. If you try it, I would genuinely appreciate hearing: What checks should I prioritize next? Which security controls matter most in your environment? What compliance frameworks are most requested by your clients or auditors? How does the report land with non-technical stakeholders? Is the executive summary useful, or does it need work? macOS/Linux users -- does it run? What breaks? I have tested it on macOS, but not extensively. Bug reports, feature requests, and contributions are all welcome on GitHub. Repository: https://github.com/Daren9m/M365-Assess License: MIT (free for commercial and personal use) Runtime: PowerShell 7.x Thanks for reading. Happy to answer any questions in the comments.
Microsoft goofed: Group Policy Office ADMX/ADML Problem
https://www.microsoft.com/en-us/download/details.aspx?id=49030 That's the link MS gives to download the Office group Policy files. Everything works until you open GP and all the policies are in German. Yes, I selected ENGLISH (it was the only option). No, I can't speak German - wish I could. I can't find these files anywhere else. PLEASE HELP. Azure Server 2022 Datacenter - need latest Microsoft Office 365 ADMX/ADML files (which may still be the Office 2016 ones, nice job keeping up with the times, Microsoft).
Online Archive Not Working for One User
Hi, I am experiencing an issue with the online archive for one of my users. The online archive has been working correctly for this user for years, but it has not archived any emails for the past six months. I have checked the licensing, retention tags, and retention policy, and everything appears to be correctly configured. I have also tried running the Start-ManagedFolderAssistant cmdlet multiple times, but it has not resolved the issue. Other users in my organization have the same retention policy and their online archives are working correctly. I have also tried changing the retention policy for the affected user to one that is known to work for other users, but this did not resolve the issue. I have tried running several cmdlets to gather more information about the issue, including Get-Mailbox | FL RetentionPolicy, Export-MailboxDiagnosticLogs -Identity -ExtendedProperties, Get-RetentionPolicy | FL Name, Get-RetentionPolicyTag, Get-ComplianceTag, Get-Mailbox | fl *hold*, Get-MailboxStatistics | fl ManagedFolderAssistantLastRunTime, Get-Mailbox -Archive | fl *, and Get-MailboxFolderStatistics -Archive | fl *. However, none of these cmdlets have helped me identify the cause of the issue. The output from these cmdlets appears to be normal and does not indicate any issues with the mailbox or the archive mailbox. One thing I noticed is that the Get-MailboxStatistics | fl ManagedFolderAssistantLastRunTime cmdlet does not return any output for any of my users, even though I have run the Start-ManagedFolderAssistant cmdlet multiple times. I am at a loss as to what could be causing this issue and would appreciate any suggestions or guidance on how to troubleshoot it further. Thank youOffice 365 Application Splash Screen / Start Screen
All office applications are opening with an alternate splash screen (the white one) I believe this is because the is a problem with my user's profile. I get the alternate screen when loading all office 365 applications. I have several odd things happening on the user's computer. Can anyone tell me what the alternate screen is telling me?
Taken over MS365 tenant, failed payment stuck
Hi all, I have taken over an MS365 tenant for a customer that took over another company. This was a tenant managed by an MSP, but they canceled the relationship. So I tried to purchase a Business Premium subscription for one month and couple it to my admin account, so that I can decoupled some devices from Intune, and also reinstate 1 or 2 accounts for the time being. I added a new billing profile (I could not add a billing account) while ordering from Microsoft directly. However the payment failed, there were 3 attempts in very quick succession. Probably because my card setting were too strict. So I switched the payment method to another card after this. However since then I have one product under "Your products" with the label "failed", the errors it gives: "We weren't able to create a subscription for one of your products. Update the selected filters and choose subscription status Failed to view the product in the list below." Clicking the product just shows "subscription failed". It does show renews on 1-7-2026. So it is expiring? How can I retry the payment? Unfortunately all support options keep pointing to the previous tenant owner so I'm posting here. So I'm trying here. I've been at this for way too long already.
Prevent Microsoft 365 meeting invites from automatically appearing in users’ calendars
Hi All, We are trying to prevent Microsoft 365 meeting invites from automatically appearing in users’ calendars as Tentative until the user explicitly accepts the invite. Setting for Outlook Classic, New Outlook and Windows or Outlook Web. Need Microsoft recommendation on this one.
Has anyone migrated from one Google Workspace to another after a company merger?
Hi all, Our company recently went through a merger and we now have two separate Google Workspace accounts that need to be consolidated into one. I need to move everything across, emails, contacts, calendars and tasks, for all users without anything getting lost in the process. Honestly not sure where to begin. Google's native tools seem limited for something like this and I don't want to start without a solid plan. Has anyone gone through a similar consolidation? How did you handle it and is there anything you wish you had known before starting?
