Restricting Access is The Most Important Step in a Microsoft 365 Copilot Deployment
I was asked what the most important step is in the deployment of Microsoft 365 Copilot. It’s a good question. Put simply, restricted access is the answer. That is, restricting Copilot access to information stored in Microsoft 365 locations until your tenant is ready for unrestricted Copilot search and retrieval. The fortunate thing is that tools exist today to make it relatively easy to establish guardrails for Copilot, which is exactly what you need to do. https://office365itpros.com/2026/06/10/microsoft-365-copilot-prep/How to Find Inactive (Stale) User Accounts
Inactive accounts can soak up a lot of paid-for but unused product licenses. With increases for Microsoft 365 licenses due to come into effect from 1 July 2026, it’s time to find and remove unused licenses from inactive user accounts. We discuss two approaches by using the Microsoft 365 Licensing Report or a PowerShell script that assesses inactivity based on sign-in dates and refresh token baselines. https://office365itpros.com/2026/06/09/find-inactive-accounts/Microsoft Wants PowerShell Developers to Change How They Download Microsoft Modules
A Microsoft blog describes some changes for PowerShell developers in terms of installing modules and the role of the Microsoft Artifact Registry (MAR). In a nutshell, Microsoft intends the MAR to be the go-to place to download first-party PowerShell modules and other artifacts. This solves the problem of potentially compromised modules found in the PowerShell Gallery, but MAR can’t work if it doesn’t contain the modules people use. https://office365itpros.com/2026/06/05/microsoft-artifact-registry/
Outlook Cached Mode Repeatedly Re-syncs Mailbox After Restart (Starts Again Around 3.99 GB)
Hi everyone, I’m experiencing a strange Outlook Cached Exchange Mode issue with a Microsoft 365 mailbox after a recent Windows rebuild and wanted to see if anyone has seen similar behavior. Environment: Microsoft 365 mailbox (Exchange Online) Outlook for Microsoft 365 Version 2605 Build 16.0.20026.20076 64-bit Windows 11 25H2 Fresh OS rebuild performed twice New Outlook profile created Office completely reinstalled OST recreated multiple times Issue: When Cached Exchange Mode is enabled, Outlook starts downloading/synchronizing mail normally, and the OST file continues to grow correctly. However, after every reboot or Outlook restart, Outlook again shows “Downloading…” starting from around 3.99 GB. Important observations: Online Mode works perfectly OUTLOOK.EXE closes properly after exit OST file is NOT deleted and continues growing Sync slider changes (1 month, 1 year, all mail) make no difference Disabling Outlook indexing did not help New Outlook profile did not help Reinstalling Office did not help Problem only started after OS rebuild Before rebuild, same mailbox worked normally in Cached Mode No pending office or windows update. It does not appear to actually re-download the mailbox from scratch because the OST size keeps increasing, but Outlook repeatedly processes/downloads from around the same 3.99 GB point after restart. Has anyone seen: Cached Mode replaying synchronization repeatedly after restart? Similar behavior on recent Current Channel builds? Security/EDR products interfering with OST synchronization state? Any known regressions with Outlook Version 2605 Build 16.0.20026.20076? Any suggestions or similar experiences would be appreciated.
Taken over MS365 tenant, failed payment stuck
Hi all, I have taken over an MS365 tenant for a customer that took over another company. This was a tenant managed by an MSP, but they canceled the relationship. So I tried to purchase a Business Premium subscription for one month and couple it to my admin account, so that I can decoupled some devices from Intune, and also reinstate 1 or 2 accounts for the time being. I added a new billing profile (I could not add a billing account) while ordering from Microsoft directly. However the payment failed, there were 3 attempts in very quick succession. Probably because my card setting were too strict. So I switched the payment method to another card after this. However since then I have one product under "Your products" with the label "failed", the errors it gives: "We weren't able to create a subscription for one of your products. Update the selected filters and choose subscription status Failed to view the product in the list below." Clicking the product just shows "subscription failed". It does show renews on 1-7-2026. So it is expiring? How can I retry the payment? Unfortunately all support options keep pointing to the previous tenant owner so I'm posting here. So I'm trying here. I've been at this for way too long already.Sending a Welcome Message to New Employees Part 2
Recently, I wrote about how to use PowerShell to send a welcome email to new employees together with attached ICS files for corporate events. Although new employees can add the ICS files to their calendars (so the solution works), simply inviting employees to attend those events by updating the participant list with PowerShell is an easier and better approach. This article explains how to find calendar events, update participant lists, and update events with the Microsoft Graph PowerShell SDK. https://office365itpros.com/2026/05/27/new-employee-email2/
Sole Microsoft 365 Admin Locked Out After Phone Replacement / Lost MFA Device
I am the sole admin for a Microsoft 365 tenant and I am currently locked out after replacing my phone. The old phone was wiped before Microsoft Authenticator was fully re-registered on the new device. Authenticator was the only MFA method configured on the account. Current situation: password is known, Teams desktop sessions are still active, Authenticator cloud backup restored successfully, but all Microsoft security and admin pages still require approval from the old Authenticator registration. I cannot access Security Info, Entra Admin, or Microsoft 365 Admin Center because every path loops back to the dead MFA registration. I have already attempted Microsoft business support phone lines, Authenticator restore and recovery, and existing desktop sessions, but support queues are disconnecting and I cannot open business support tickets because the admin account itself is MFA locked. Tenant: lowepfg.onmicrosoft.com What is the fastest recovery or escalation path to force MFA reset or re-register Microsoft Authenticator for the tenant admin account?
Stop Excel auto formating
How do I stop Excel from automatically formatting cells? I have three columns. The first column is formatted currency with fill. The second is text. The third is general. When tying a number in the general column Excel automatically formats the cell to currency with a fill matching the first column. How can I stop Excel from automatically changing the formatting of the cells in the third column?Inherited group-based license service plan checkboxes are now editable but fail on save
Hello, We are observing a possible UI regression in the Microsoft 365 admin center related to group-based licensing. Environment / scenario: - Microsoft 365 admin center - User-level “Licenses and apps” screen - The user receives the Microsoft 365 license through group-based licensing - The source group is a Microsoft Entra dynamic security group - The license and service plan settings are intended to be controlled at the group-based license assignment level We understand that when a license is inherited from a group-based license assignment, the apps/services for that inherited license should not normally be changed directly at the individual user level. The service plan configuration should be managed at the group/license assignment level. However, the current UI behaviour is confusing. Observed behaviour: 1. Open a user in the Microsoft 365 admin center. 2. Go to the user’s “Licenses and apps” screen. 3. The user has a Microsoft 365 license inherited from a group-based license assignment. 4. Some app/service checkboxes appear to be enabled and editable. 5. An administrator can actually clear/uncheck those checkboxes. 6. However, when clicking OK/Save, the operation fails with an error. In other words, the UI allows an administrator to make a change that cannot actually be committed. The reason this looks like a regression is that the previous UI behaviour was different. Previously, when a user’s Microsoft 365 license was inherited from a group-based license assignment, the relevant app/service checkboxes on the user-level “Licenses and apps” screen were greyed out or effectively read-only. Administrators could visually understand that those service plan settings could not be changed directly at the individual user level. Recently, those same checkboxes appear to be active and editable. The administrator can uncheck them, but the change fails only after clicking OK/Save. From an administrator UX perspective, this is confusing because the UI appears to allow an unsupported operation and only rejects it at save time. Expected behaviour: If service plan settings for an inherited group-based license cannot be changed at the individual user level, we would expect one of the following behaviours: - The checkboxes should remain disabled/read-only from the beginning. - The UI should clearly state that these apps/services are inherited from a group-based license assignment. - The Save/OK button should be disabled for changes that cannot be applied. - The UI should provide a link or guidance to manage the setting at the group-based license assignment level. Questions: 1. Has anyone else observed this recent change in behaviour? 2. Was this UI change intentional? 3. Is this a known issue or known UX regression in the Microsoft 365 admin center? 4. Is there any scenario where these checkboxes are intentionally editable for a user who receives the license only through group-based licensing? 5. Does this behaviour differ depending on whether the source group is an assigned security group or a dynamic security group? 6. Is there any recommended administrator workflow when troubleshooting service plan settings for a user whose license is inherited from a group-based license assignment? To clarify, this is not a question about how group-based licensing works. The concern is specifically about the UI behaviour where inherited license service plan checkboxes were previously greyed out, but now appear editable even though the change fails on save. If this is not intentional, it would be helpful if the Microsoft 365 admin center could restore the previous read-only/greyed-out behaviour, or clearly explain in the UI why the change cannot be saved. Thank you.
