Save the date - January 26, 2026 - AMA: Best practices for applying Zero Trust using Intune
Join us on January 26 at 10:00 AM PT, to Ask Microsoft Anything (AMA) and get the answers you need to implement the right policies, security settings, device configurations, and more. Never trust, always verify. Tune in for tips and insights to help you secure your endpoints using Microsoft Intune as part of your larger Zero Trust strategy. Find out how you can use Intune to protect both access and data on organization-owned devices and personal devices used for work. Go to aka.ms/AMA/IntuneZeroTrust and select "attend" to add this event to your calendar. Have questions? Submit them early by signing in to Tech Community and posting them on the event page!
I cannot Send an email suddenly - Comes back as Undeliverable
My email was working fine, and then suddenly 5 minutes later this error started showing up when I tried sending another email: Please help!! I am also the admin of the group, but I don't know how to fix this as I am obviously not spam, and no one has blocked me. Delivery has failed to these recipients or groups: This message couldn't be delivered because the sending email address was not recognized as a valid sender. The most common reason for this error is that the email address is, or was, suspected of sending spam. Contact the organization's email admin for help and give them this error message.New Blog Post | Azure resource entity page - your way to investigate Azure resources
Azure resource entity page - your way to investigate Azure resources - Microsoft Tech Community Azure resources such as Azure Virtual Machines, Azure Storage Accounts, Azure Key Vault, Azure DNS, and more are essential parts of your network. Threat actors might attempt to obtain sensitive data from your storage account, gain access to your key vault and the secrets it contains, or infect your virtual machine with malware. The new Azure resource entity pages are designed to help your SOC investigate incidents that involve Azure resources in your environment, hunt for potential attacks, and assess risk.
Questions on controlling SKIP UPN behavior on office apps such as Teams.
Hi Community, Customer has below user flow/setup User signs in to physical/virtual device which is domain joined to edu.lcl. Their edu.lcl identity is synced to an Azure AD Tenant via AD Connect (ABC.com). Office, Teams, OneDrive then tries to SSO in to apps using mailto:username@ABC.com The ABC.com account is not licensed for Office services, they need to use mailto:username@XYZ.com – The customer has no control over the XYZ.com tenant, its there for licensing purposes. We need a solution that allows the users to SSO into apps using mailto:username@XYZ.com every time. If this is not possible we need to mask hide and stop login prompts to office services for the ABC.com domain Example for OneDrive on each login, how do we get it to remember @XYZ.com credentials? Teams is prepopulated as below (mailto:User@ABC.com Note: There are registry keys to control a lot of these settings but its unclear to customer that what the optimal setup with dual identities setup in this way. The SkipUpnPrefill option mentioned https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmicrosoftteams%2Fsign-in-teams%23how-modern-authentication-works&data=04%7C01%7Cbalgan%40microsoft.com%7C5a18f37f2bf64f748df908d9881a2689%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637690468210124979%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=bM6VBK99T4TI5f%2BZ04TQcwNY%2B466uz36%2Bn9Ww38lQHU%3D&reserved=0 seems temperamental for example. Any guidance would be of great help!
Configuring Reverse DNS queries for public IP that hosts multiple websites...
What is the best practice in configuring reverse DNS for a public webserver IP where it is hosting multiple websites. i.e. http://www.domainA.com http://www.domainB.com ... http://www.domainZ.com All resolve to: 192.168.1.100 how should the reverse DNS PTR record for 100.1.168.192.in-addr.arpa be configured in Azure-DNS ?Azure AD Connect and Azure DNS for both Public and Private DNS?
I have Migrated all of our Public Facing Domain names to Azure DNS. So all of our Public IPs are being returned for all of the domain names. This is working fine. I'm not looking to use Azure AD Connect to Sync our AD to Azure. Possible I have not read that Far in the Documentation, though is there a way to Separate out the Public and Private DNS Zones with Azure AD Sync Integration? We host 35 Domains and each had Mail/Web Servers associated with them. If I use AD Connect will the DNS get Messed up with the Public and Private Addressing?
