File Sharing between licensed account holders
From a starting point of this year, we have been finding that any to most file shares that happened between licensed MS account users are being flagged and quarantined by the anti-malware policy. This should be, we are looking to resolve this issue. Has anyone else experienced this issue and what was your resolve. At the moment we have to monitor the quarantines and manually go in to release the share notifications.
Where does Teams get its user list from? I can't make sense of which accounts I see vs which I can't
OK, so I have a currently rather unusual situation. I am looking at a 365 Tenant. A number of users have four accounts on the same tenant (let's not even get into why, cleaning things up is part of the reason I got called in). When you start typing their name into teams it comes up with three of them as a suggestion (I only want one) Account 1: has just been used for ActiveDirectory for permissions to the company's Distributed File System (stored in on on premises servers in various locations). This account has to the best of my knowledge never had a license or mailbox associated with it, and so has never been on the global address list, it's also never had the teams app enabled for it. I don't want this one to show, but it does Account 2: A now defunct account which used to have a Business Standard license assigned to it, but has now had the licensed removed. Before the license was removed this account was hidden from the GAL and its teams app disabled. I don't want this one to show, but it does Account 3: An now defunct account which still has a Business Standard license, but with Teams deselected in the Apps. I don't want this one to show... and it doesn't Account 4: An account shared via a multi tenant organization (the users in question have been migrated to a new tenant). So these are members (not guests) but external ones. I want this to show, and it does. Now, accounts 2 and 3 will be deleted soon, whether we can get rid of account 1 depends on whether the necessary access to the DFS can be done using account 4 (which I need to look into next). However for the time being they are all there so I was trying to hide accounts I don't want users trying to message on teams from teams, and I cannot make any sense of which I see which I don't. To sum up. Account that has never been on the Global Address List and never been activated for Teams - Shows Account that used to have a license and was on the GAL, and used in teams - Shows Account that still has a license, but has been removed from GAL and had teams app disabled - Doesn't show Account that has no license and is not on the GAL, but has teams on it's host tenant - Shows After a previous inquiry I set "Scope directory search using an Exchange address book policy" in the teams setup, but I have not set up any specific address book policy as yet. I have tried showing and hiding people from the global address list, and also the "ShowInAddressList" setting in Entra (which seems to only be available through graph?). Nothing seems to make a difference (it doesn't help that Teams takes forever to update its local cache for this stuff, so maybe a change DID make a difference at some point and I missed it). I cannot find any logic as to which of these accounts is showing in the auto suggests and which not, most notably that account 1 shows but account 3 doesn't. So, where is Teams getting its list of contacts from?
Unable to access our Microsoft Entra admin center
We cannot create a support request from the admin center because we cannot sign in Dear Microsoft Support Team, We are unable to access our Microsoft Entra admin center because even our administrator account, email address removed for privacy reasons, is being prompted for MFA, and we do not currently have access to the Microsoft Authenticator method required to complete the sign-in. As a result, we cannot access Entra ID / Microsoft 365 admin settings to reset MFA methods, issue a Temporary Access Pass, or re-register authentication methods for the affected users. Tenant/domain: itieurope.com Affected admin account: email address removed for privacy reasons Issue: MFA is required to sign in, but the Authenticator method is unavailable Impact: We are locked out of the tenant administration portal and cannot manage users or authentication methods We request assistance with one of the following recovery actions: Reset MFA methods for the administrator account email address removed for privacy reasons; or Enable re-registration of MFA for this account; or Provide a Temporary Access Pass or another Microsoft-approved recovery method so that we can regain administrative access to the tenant. We had force majeure, the only authenticator was on the phone, which was destroyed due to an unforeseen situation. (crashed) We are ready to verify domain ownership, provide billing information, tenant details, proof of identity, or any other information required to confirm that we are the legitimate owners/administrators of this Microsoft 365 tenant. Please escalate this as an urgent tenant lockout / admin access recovery issue. Kind regards, itieurope.com email address removed for privacy reasons
MCA billing account stuck in "under review" status for 4+ days, no resolution
I'm the Global Admin for a Microsoft 365 tenant (domain: fortunamg.net) recently transitioned from a GoDaddy CSP reseller relationship to a direct Microsoft Customer Agreement (MCA) billing account. After setting up the MCA billing account and adding a payment method, I attempted to make an edit to my billing account address (updating to the new 9-digit zip code format). This triggered an "Account under review" status, which states the review usually takes up to 2 days. It has now been over 4 days with no update or email notification. This review is blocking me from purchasing a subscription, which I need to do to restore an active Microsoft 365 subscription on this tenant (currently showing as "Disabled" following the GoDaddy detach). Billing Account ID: 7793dd6e-68c9-5362-c5e2-3fe091b9854c Domain: fortunamg.net Could someone help check the status of this review or escalate to the appropriate team? Phone support has been unable to resolve this. Thank you.Sole Admin Locked out of Microsoft tenant -- MFA Error 500121
Sole Admin Locked out of Microsoft 365 Tenant- MFA Error 500121 using OTPKEY Im the original administrator of a Microsoft 365 Business Basic tenant for the City of Briarcliff. Tenant: mailto:email address removed for privacy reasons Admin Account: mailto:admin@briarcliffar.onmicrosoft I can succesfully enter the correct password, nut MFA verification fails with error code 500121. I have original microsoft 365 setup email showing the admin account The microsoft purchase receipt and Order ID. Access to billing email account Control of the cityofbriarcliff.gov domain through Cloudflare. The tenant was never fully configured beyond the initial setup process. I was able to sign in originally and reached the Connect and Configure your domain page but did not complete deployment. I need assisstance with recovery of the sole administrator account and MFA reset for tenant. I can provide provide proof of purchase, original setup email, billing information, and proof of control of cityofbriarcliff.govIs Office 365 E3 Developer free
Hi, My tenant had a license named "Office 365 E3 Developer" which allowed us to use Outlook / Exchange (among other Microsoft Office products). This license isn't from the Microsoft 365 Developer Program, which come with free licenses. This license costed CA$11.60 a month per user when we initially purchased it. On May 2, 2026 it still costs $11.60, but when I received my monthly invoice for this tenant, this license was free. I searched around to see whether this license became free recently, but I couldn't find any info on this. The links I found all say it's a paid license. I was wondering if there's any info on this to see why it became free? Or is it a mistake and Microsoft'll be charging us the next billing cycle? Jason
O365 Exchange connectors apply spam filters before checking certificate
If you have devices like multifunction printers which need to send email the MS solution is to configure an inbound email connector. You can use source IP to identify the origen of incoming messages and to associate them with the inbound connector. However the best way is to use a certificate in the TLS session. So far so good. However theres a design problem. MS applies RBL filters seemingly before checking either the source IP or the certificate. If the IP appears in the list MS simply reject the connection. The makes no sense as they are checking against the spamhaus general rbl. This RBL contains all dinamic IP ranges. I don't know for other countries but where I am even if you contract a fixed IP, the IP address they assign you is still in the dynamic IP range, its just fixed. This means that the reverse lookup on the IP address shows a name with dynamic in it. Spamhaus automatically include these in their RBL. Most companies will have a normal fiber connection, with a fixed ip or not. Those fiber connections will almost always be included in a spamhaus rbl as they are not going to be running mail servers. Thus checking the IP against the general spamhaus RBL makes no sense as it is going to automatically block almost everyone who would actually use an inbound mail connector. Does anyone know how to communicate this situation to whoever controls this in MS? IanMC1269241 - Can't turn off antropic for agentmode
Hi, I’m trying to figure out how to turn off the new feature where Anthropic is enabled by default for everyone in the EU for agent mode in excel and powerpoint, as described in the Message Center news in the title. It is not possible to press Save when you have unchecked the setting unless you also consent to the terms of use, it is greyed out. Since we want the feature turned off, we do not want to agree to any terms of use. Has anyone found a solution? This seems to be misconfigured.
M365 only admin locked out MFA error 53003
I am learning this the hard way....so here it goes. Currently I am locked out of as the only admin on the tenant with error 53003. I was updating some Microsoft MFA default policy settings in Entra and mistakenly deleted the admin user from the exclusions list, and got locked out. Thankfully I have another tenant, not as big the one locked out. Initiated several support tickets for which everyone calls, and despite of subline mentioning the issue says that they have to assign this ticket to Entra. Then the ticket gets updated and noone has been assigned every since. I have initiated severity A support tickets from Azure portal but no one has called in last 24 hours to help. We area business with Business Premium licenses with over 20 users, and now completely locked out. I have looked almost everywhere online. There is no phone number that takes you to a support agent - PLEASE HELP........