The latest mobile apps killed mobile first when working with files
Hi, I really enjoyed working only with mobile devices when we started with M365. On iOS the OneDrive app was paramount when organising files in SharePoint/Teams Sites. Easy up- and downloads, drag‘n drop. Move and copy all was there to manage a companies files on mobile devices even when only on mobile network connections. But the upgrades that happened over the last 1-2 years completely break this kind of workflows. There is no really mobile-first paradigm visible anymore. The OneDrive app was worst. All the pretty well integration file management stuff is gone. No drag‘n drop. No useful integration into iOS Files app. Copying between OneDrive and SharePoint got a pain. Bulk operation just silently fail. Files get renamed without any warning (numbers get added to the name or are just increased so no one will ever find the file again). So just two simple usability examples that are a mess: to select multiple files in a folder you have to press the word ‚Select‘ that is not a button or something. This shows up like a column heading in the file view. Right beside ‚Name‘ and ‚Date Modified‘. Why are active user elements placed in table headings? If you browse into some SharePoint folders and quickly want to go back to your OneDrive files you either have to press the back button over and over again until your back to the top level view or you can press-hold the back button and then select ‚Files‘. Butthe latter brings you to the top level Library view and you still have to manually go to ‚Files‘. The old app design just had a top menu bar where views could easily be switched. Am I the only one who wants to work on mobile devices? Does Microsoft still expect everyone to use a laptop and run desktop apps? Annoying.
one drive mapped network drive Win 10
I want to use my onedrive CID number to connect to a mapped network drive in windows explorer. But, as soon as I type my microsoft account credentials at the login prompt, it doesn't log in but just loops back to the login screen window. What should I do ? Has microsoft stopped allowing onedrive mapped network drive on windows 10 explorer ?I built a free, open-source M365 security assessment tool - looking for feedback
I work as an IT consultant, and a good chunk of my time is spent assessing Microsoft 365 environments for small and mid-sized businesses. Every engagement started the same way: connect to five different PowerShell modules, run dozens of commands across Entra ID, Exchange Online, Defender, SharePoint, and Teams, manually compare each setting against CIS benchmarks, then spend hours assembling everything into a report the client could actually read. The tools that automate this either cost thousands per year, require standing up Azure infrastructure just to run, or only cover one service area. I wanted something simpler: one command that connects, assesses, and produces a client-ready deliverable. So I built it. What M365 Assess does https://github.com/Daren9m/M365-Assess is a PowerShell-based security assessment tool that runs against a Microsoft 365 tenant and produces a comprehensive set of reports. Here is what you get from a single run: 57 automated security checks aligned to the CIS Microsoft 365 Foundations Benchmark v6.0.1, covering Entra ID, Exchange Online, Defender for Office 365, SharePoint Online, and Teams 12 compliance frameworks mapped simultaneously -- every finding is cross-referenced against NIST 800-53, NIST CSF 2.0, ISO 27001:2022, SOC 2, HIPAA, PCI DSS v4.0.1, CMMC 2.0, CISA SCuBA, and DISA STIG (plus CIS profiles for E3 L1/L2 and E5 L1/L2) 20+ CSV exports covering users, mailboxes, MFA status, admin roles, conditional access policies, mail flow rules, device compliance, and more A self-contained HTML report with an executive summary, severity badges, sortable tables, and a compliance overview dashboard -- no external dependencies, fully base64-encoded, just open it in any browser or email it directly The entire assessment is read-only. It never modifies tenant settings. Only Get-* cmdlets are used. A few things I'm proud of Real-time progress in the console. As the assessment runs, you see each check complete with live status indicators and timing. No staring at a blank terminal wondering if it hung. The HTML report is a single file. Logos, backgrounds, fonts -- everything is embedded. You can email the report as an attachment and it renders perfectly. It supports dark mode (auto-detects system preference), and all tables are sortable by clicking column headers. Compliance framework mapping. This was the feature that took the most work. The compliance overview shows coverage percentages across all 12 frameworks, with drill-down to individual controls. Each finding links back to its CIS control ID and maps to every applicable framework control. Pass/Fail detail tables. Each security check shows the CIS control reference, what was checked, what the expected value is, what the actual value is, and a clear Pass/Fail/Warning status. Findings include remediation descriptions to help prioritize fixes. Quick start If you want to try it out, it takes about 5 minutes to get running: # Install prerequisites (if you don't have them already) Install-Module Microsoft.Graph, ExchangeOnlineManagement -Scope CurrentUser Clone and run git clone https://github.com/Daren9m/M365-Assess.git cd M365-Assess .\Invoke-M365Assessment.ps1 The interactive wizard walks you through selecting assessment sections, entering your tenant ID, and choosing an authentication method (interactive browser login, certificate-based, or pre-existing connections). Results land in a timestamped folder with all CSVs and the HTML report. Requires PowerShell 7.x and runs on Windows (macOS and Linux are experimental -- I would love help testing those platforms). Cloud support M365 Assess works with: Commercial (global) tenants GCC, GCC High, and DoD environments If you work in government cloud, the tool handles the different endpoint URIs automatically. What is next This is actively maintained and I have a roadmap of improvements: More automated checks -- 140 CIS v6.0.1 controls are tracked in the registry, with 57 automated today. Expanding coverage is the top priority. Remediation commands -- PowerShell snippets and portal steps for each finding, so you can fix issues directly from the report. XLSX compliance matrix -- A spreadsheet export for audit teams who need to work in Excel. Standalone report regeneration -- Re-run the report from existing CSV data without re-assessing the tenant. I would love your feedback I have been building this for my own consulting work, but I think it could be useful to the broader community. If you try it, I would genuinely appreciate hearing: What checks should I prioritize next? Which security controls matter most in your environment? What compliance frameworks are most requested by your clients or auditors? How does the report land with non-technical stakeholders? Is the executive summary useful, or does it need work? macOS/Linux users -- does it run? What breaks? I have tested it on macOS, but not extensively. Bug reports, feature requests, and contributions are all welcome on GitHub. Repository: https://github.com/Daren9m/M365-Assess License: MIT (free for commercial and personal use) Runtime: PowerShell 7.x Thanks for reading. Happy to answer any questions in the comments.
How should home and small org users address Kali365 Hijacking Microsoft 365 Access Tokens?
How should home and small organization small business users address the recent Federal Bureau of Investigation Public Service Announcement “to warn the public about an emerging Phishing-as-a-Service platform called Kali365, first seen in April 2026” See Alert Number I-052126-PSA 21 May 2026Microsoft to Delete Unlicensed OneDrive for Business Accounts
Microsoft will delete unlicensed OneDrive for Business accounts that aren’t paid for (to be archived) after July 2026. Up to now, it’s been possible to leave unpaid-for accounts linger in Microsoft 365 archive until retention policies and holds expire. Now, tenants must decide which accounts they wish to keep and pay for. Unpaid accounts will be removed, even if retention policies or eDiscovery holds apply to their content. https://office365itpros.com/2026/06/12/unlicensed-onedrive-for-business-2/
Allow Canvas Studio Public Embeds in Microsoft Sway
Sway is a hidden gem inside of Microsoft 365. I just discovered it, and it's an amazing tool to turn old PowerPoints or even lecture notes into dynamic lessons for students! One limitation I'm running into is the embed whitelist. While I know this app likely has low priority, is there any chance there is a way to request a specific site be added to the embed whitelist? My biggest priority would be Instructure's Canvas Studio. Microsoft's new LTI 1.3 integration with Canvas has some rough edges, but it's an amazing start! Thing is, I don't want to share a wall of text lecture notes from Microsoft Word through OneDrive. I like the dynamic and more visually oriented style of Sway. The Problem: Currently, when trying to embed instructional videos from Canvas Studio into a Sway presentation, the platform blocks the embed code. This forces educators to either upload duplicate files to a different hosted service (like YouTube or Vimeo) or break the seamless student experience by using text hyperlinks. And the problem with YouTube is that many of our local community partners at K-12 schools have YouTube blocked on the Chromebooks early college students use. Proposed Solution: White-list Canvas Studio public embed domains so that users can seamlessly paste iframe code from Canvas Studio directly into Sway Embed Cards. This will create a smoother workflow for the thousands of schools utilizing both Microsoft 365 and Canvas LMS. And while you're in there adding Canvas, You might consider expanding that whitelist further. Scribe tutorials would be great, or similar services. TikTok might be controversial, but that would be good. Students don't click links; they'll click play on embedded content. Expand the whitelist, please!
Why is Microsoft 365 setup (Groups + SharePoint + Domains) still so complex?
Microsoft 365 Setup Feedback Summary Summary of Experience: Setting up two small business workspaces (Cork & Clarity and Stone Clarity Consulting) in Microsoft 365 required navigating multiple disconnected systems including the Admin Center, Outlook, SharePoint, and an external DNS provider. The process was significantly more complex than expected and not intuitive for a non-technical user. Key Issues Encountered: 1. Identity and Account Confusion - Unclear whether to create separate users or use one account with aliases - Creating multiple users caused login confusion, broken permissions, and access issues 2. Domain and DNS Setup Complexity - Required switching between Microsoft and external DNS (Looka) - Instructions were unclear and required manual troubleshooting - No clear distinction between required and optional DNS records 3. Default Domain Confusion - New groups defaulted to the wrong domain - No visible option to change domain during group creation - Required changing global default domain (non-intuitive) 4. Inconsistent Group Behavior - Outlook groups and Teams-backed groups behave differently - No indication of differences or consequences - Groups appeared in some places but not others 5. Membership and Ownership Issues - Group creator was not consistently added as member - Ownership did not always persist after changes - Groups existed but were inaccessible or invisible 6. Outlook UI Limitations - Groups not visible despite existing and being correctly configured - No clear instructions on how to 'activate' or 'follow' groups 7. SharePoint Site Not Created Automatically - SharePoint sites were not created when groups were created - Required hidden steps: Outlook → Files → Open in SharePoint - No indication that the site did not exist yet 8. SharePoint Discovery Issues - Sites do not appear until manually accessed or followed - No onboarding or guidance for discovering sites 9. Ghost/Deleted Items Still Visible - Deleted group (Cork & Clarity Hub) remained visible - No clear distinction between deleted vs followed sites 10. Fragmented User Experience - Required switching between multiple platforms - No single place to manage or understand setup status - High cognitive load for basic configuration Conclusion: While Microsoft 365 is a powerful platform, the initial setup experience is overly complex and fragmented, especially for small businesses. Simplifying group creation, making SharePoint provisioning automatic and visible, and improving UI consistency across apps would significantly improve usability and adoption.OneDrive Sync Client Changes How It Processes Deleted Files
Microsoft plans a May 2026 update for the OneDrive Sync client to improve the way that the client handles the deletion of files stored in SharePoint Online and OneDrive for Business. The client will no longer move the local synchronized copy of the deleted file into the workstation’s recycle bin, meaning that the only copy is on the server. The change removes complexity and should improve performance. https://office365itpros.com/2026/04/27/onedrive-sync-client-deleted-files/
