My company bought another small company, We transferred 80 mailbox to our 365 tenant. The deal fell thought in the last moment after the data was already transferred. I now need to hard delete all mailbox and provide proof they are purged. I removed all holds on the accounts, Removed the licenses, But i cant seem to deleted the mailbox. Any ideas?

Making a new email profile with the new 365 accounts fails with "An encrypted connection to your mail server is not available" and the OAUTH2 prompt never shows up. Switching to a clean USER profile DOES allow creation of the Outlook mail profile and is how I've migrated their PSTs to 365.

But these are definitely "pets" not "cattle" and these users are very set in their ways. I'd much prefer NOT to try to migrate them to new user profiles.

My next step is going to be to use SARA to remove as many traces of all Office versions as possible and reinstall.

I'm thinking there's something in the user-specific registry hive that's preventing the connection.

Hi there, I work for a small company and our emails are struggling under Reg123. So much so that our boss is now urgently transferring us all over to Microsoft365. I'm worried I'm going to lose my emails and ideally would like to transfer them over seamlessly with all my folders/filing in tact. Wondering if anyone has any tips, please! TIA.

Microsoft Entra tokens are digital credentials issued by Microsoft Entra ID (formerly Azure Active Directory) to authenticate users and authorize access to protected resources within an organization’s environment.

In this post, you'll gain insights into the various types of token thefts, including how they occur and their implications for your organization. By understanding these threats, you can better equip your security measures to protect valuable information and maintain the integrity of your systems.

 https://4sysops.com/archives/how-to-prevent-token-theft-using-the-new-token-protection-conditional-access-policy-in-microsoft-entra/

https://preview.redd.it/8o8s1mosc20e1.jpg?width=1024&format=pjpg&auto=webp&s=bd1a379969344bf3d9299e763d00f36d16b79951

Hi, i have a question. Is it possible to use companys microsoft softwear at home? I logged in onto my companys word becouse my is no longer aveliable but im not sure if my employee can see that someone logged into company account outside of work. If someone know if it is possible will be glad for response.

Or any training videos would do the trick.

Apparently some idiot in head office decided everyone in Australia and some other markets gets copilot crammed into all your programs without any option to opt in or out, there is some workaround, but I find this so morally repugnant I'm done giving the company money.

I've been subscribed since i finished university and never thought about the 16 Australian dollars coming out every month because, hey its Microsoft word i occasionally use that.

Guess I'm using google docs now.

Edit: They also bumped the price by 6 bucks a month without asking me to opt in

Hi, Has anyone found a solution for this issue? I used to use my personal computer for my work account, but since I left that job, I have removed all credentials and log in information for my work account. I purchase the personal 365 annual membership but now everytime I open any application I get this message

Been following this link: https://learn.microsoft.com/en-us/entra/identity/authentication/howto-mfa-nps-extension to get my local VPN to use Azure MFA. I setup a server. Added NPS. Added the extension. Ran the Powershell script. It says it compelted. I do not see any errors,
I checked here: How can I verify that my client certificate is associated to my tenant in Microsoft Entra ID? and do not see any certificates shown.

I checked the firewall of the NPS machine, added the secret from the VPN Radius connection.

I tried running this manaully: Connect-MgGraph -Scopes 'Application.ReadWrite.All'
New-MgServicePrincipal -AppId 00001111-aaaa-2222-bbbb-3333cccc4444 -DisplayName "Azure Multi-Factor Auth Client" and it says the AppID is invalid.

Any ideas where I may have gone wrong?

Are there any major differences between PPT 2024 and 2016? I have a job interview with a company that only has access to 2016 PowerPoint and my lab has the latest 2024 version. I use a lot of animations to convey my work and I'm worried some of the animations may not be compatible. Anything I should avoid?

Hello Folks,

Having issue with Outlook 365 (subscription based SW from Microsoft 365). I have a few POP emails for yahoo.com and a few IMAP emails with outlook.com and google.com setup in outlook.

After the initial synch Outlook would not synch again with remote email servers.

The dialog looks like this.

Stuck like above

In lower bottom

It works fine again if I kill the outlook process from Task Manager and restart Outlook OR reboot.

Issue started with Outlook 365 and Windows 10.

Have tried below so far multiple times.

Upgraded to Windows 11

Removed and cleaned Outlook 365, reinstalled Office 365 and readded all email accounts.

Don’t see anything meaningful in event viewer.

Any suggestions, pointers for more debugging would be appreciated.

Thanks in advance

Hi everyone,

i have to use Office 2019 for school.

Since 2019 doesn't get any updates, is it possible to deactivate the notifications?

They are really annoying but I couldn't find out how to do it.

I already deactivated the notifications in MacOS but I still get those in the software.

https://preview.redd.it/gi25rqnv9wzd1.jpg?width=1082&format=pjpg&auto=webp&s=e2c4545885efe480c1ced071aa94581bc4a5e3fe

I'm no longer able to switch to Classic Outlook, my preferred version. I had a To Do List that was not date specific, and now that feature is gone in the new Outlook. No checkmark anywhere on the navigation pane or at the bottom. I see the MyDay at the top of the screen but can only add Events which are date-specific. How do I get my old To Do List back, or is it gone for good?

EDITED TO ADD: Found the Microsoft To Do in my Apps list, so I pinned that to Start and my old list returned! Still mystified about the other issues, but at least my list is back! Will just have to open it separately and grumble that it's not part of the new Outlook.

Is there a way to slim down MS Word's huge and distracting UI? I took a screenshot with LibreOffice Writer running for comparison. I remember it's not as big as that last month or 2 months ago.

https://preview.redd.it/cgpz3jhpltzd1.png?width=1555&format=png&auto=webp&s=729064ded4b4b0c0c4516e95f5222dc1f5d76a6c

Simplified Ribbon in OUTLOOK, but dang, it's still so HUGE. And I am not in Touch mode.

Missing Simplified Ribbon

Anyone else noticed issues with OneDrive on 365 not updating as it used to? I have constantly manually refresh folders that appear empty when i know that they are there and hold documents. Frustrating.

Hi all. Apologies if this isn't the right place to ask this, but I have an issue that's been driving me crazy for more than a year now, and I cannot find an answer, so I'm hoping someone can help.

I use Word for Mac Version 16.90. While I'm writing, the typeface will sometimes suddenly change to Times New Roman. Specifically, the Normal style itself converts to TNR. It seems to happen when I paste in some text, but I'm not sure it's only when I paste, and certainly not every time I do it - maybe 1% of the time? The source of the text I paste that triggers it doesn't seem consistent (though it's usually citations from Westlaw).

It's easy enough to fix, because all that's happening is that the Normal typeface is switching, so I can just switch it back. But I really need to figure out why it's happening because it's pretty annoying!

Thanks for any suggestions you have!

Hi,

I have a shared inbox and am trying to see if I can send different auto replies to specific senders. I tried to create a mailbox rule but nothing in the action section to send an auto reply.

I tried to create an Exchange mail flow rule but again, there is no option for auto reply.

Is there a way to send different auto replies to different senders in 365?

I took a few years off and am back in the game. I did AD since Windows 2000 and took a new gig that is all M365. As an early step I wanted to get groups organized to cut down on as much 1:1 user assignment as possible. In previous roles I was able to get things pretty close to "put user in one group and inherit all the rest".

It seems Entra and M365 have made this hard. Nested groups are mostly worthless and super limited. Is there anything I am missing to make groups more effective such that I can get closer to my ideal of "put one user in one group and everything else is inherited through well though out nesting"?

I cause myself too many problems!

At some point I gave a user at a client exchange plan 2 because their mailbox was getting up to 50GB and he wantted to keep things.

I realize now that I'm billing them for exchange plan 1 for that user - I made the license change in m365 / at the CSP, but didn't change the billing.

I've spent several hours trying to go into graph with PS (that I don't know well) to get the assignment date. But things aren't working : )

It seems graph and licenses is more complex than simple 1 line commands in PS?

Anyone know how to see when a license was assigned to a user?

And / or a way to see historical growth of a user's mailbox. Once it went over 50, that's around the time I gave them the bigger mailbox.

I haven't found an email thread about this (more wasted time). And trying to go through bills from my CSP is a pain - quantities of any specific license change over time as the client changes licenses they need.

Yeah, this IS a good argument for having clients deal with MS for license billing directly... : ) Too late for this one now : )

THANKS!

So, I’ve just started working with getting some users working on AzureAD/EntraID-joined systems.

I’ve done this on the odd device here and there in the past, but not to the scale I am now.

My question is “How am I supposed to be managing/setting up these devices when x user leaves and y user needs to be set up on the old device?

As far as I understand, the devices don’t enroll like they do when you are joining an on-prem AD domain. These devices join with the name of the user that set them up, and they are supposed to be joined by the primary user account instead of a domain admin-type account.

From that understanding, I would think that every time a user leaves the company or gets a new computer, I would need to remove the old one from the Entra domain and rejoin it with the new user’s account.

Is this right? Are there better ways to accomplish this? Do I fundamentally misunderstand anything?

Thank you!

Hi,

I am trying to figure out how to best automate the process of enabling email archive in exchange and setting our retention policy to a default option available.

My current process is manually going to Exchange>Users>Select User>Enable email archive>Set Retention Policy.

There is a PowerShell script to run for every new employee, but it's not convenient to do. I would like to run a PowerShell script to automate this process for all new employees going forward.

TIA

I have an excel file that tracks daily stats and is a pain to keep up with each year or modify as we expand. Going through and putting all the formulas and linkages in takes forever and isn't how I want to use my time. Looking for a solution where each location could just fill out a form daily - Drop down their location and the correct date, and then enter the stats numbers into each of 10 or so categories and hit submit. From that point pulling the data into an excel sheet so it can go into power BI, or if there is a way for the information to go straight from the form to power BI that would be cool too. I admittedly know NOTHING about Power BI but I know that is what my leader is doing with the data from our spreadsheet. What is my easiest solution to do something like this?

ETA: I'm looking for something a little more streamlined than literally using Microsoft forms. Is it possible to do this within an excel form where the data could be quickly added and then saved out into another part of the document to aggregate?

So, I've been trying to make a flow that gets a creation or modification of a file in a folder A from site A and copies it to folder B in site B.

When running a test, it gives out an error when you create or modify FOLDERS. It still copies anyway, don't know why, but it says: File not found clientRequestId: 6dfabdb9-08e7-4e66-9c22-aa2708545eb5 serviceRequestId: 33ef61a1-b06b-6000-df62-f75b2c3da32a

For files, it works with no errors.

https://preview.redd.it/lgmuvlz9lpzd1.png?width=673&format=png&auto=webp&s=2e05121da3d7f16ff53de55b7cf8d6d096ba6345

https://preview.redd.it/9tmp350zlpzd1.png?width=684&format=png&auto=webp&s=83a7d2b99b00396dc5fd0b8d2b9d44282f1727dd

The real question is, how do I copy a file from the source folder with it's parent folder, and not only the file?

I mean, inside that GUIAS DE EMBARQUE folder from the source, there is a "2024" folder. If I create a file inside this "2024" folder, it copies to the other site, but it's just a plan file, not inside "2024" folder.

How do I make it so it also copies the parent or nested folders?

Hi All,

I restored a DB file from backup. Now, if I double-click the file I get a "Potential Security Threat" error. If I click Open, it opens but with only the File menu and no access to Tables or Queries, etc.

I have:

• Right-clicked the file and looked for the Unblock button. It is not there.
• Created a folder (local, on the C: drive) , added the folder to Trusted Locations, put the file in that folder. Still get the error.
• Downloaded Sysinternal Streams and looked at the file. There are no alternate streams listed.
• Copied the file and tried opening the copy. Same error.

I can open Access, then open the file. That works. Double-clicking on the file does not.

How do I get rid of the error?

Thanks all!

I wanted to check if there’s a way for our end users to directly access any training sessions they have yet to complete. Currently, we use an external contractor for our attack simulations, and I handle the reporting side of things. I’ve been asked if there’s an option for users to access any incomplete or not started training on their own, but I haven’t been able to find a straightforward solution for this.

I tested with one user by navigating to security.microsoft.com, but it didn’t appear to have any training access for them or even the option for trainings. Apologies if I’ve missed something, but I couldn’t locate any guidance on this topic. Any help or pointers would be much appreciated!

Hi,

We have a colleague whos primaryofficelocation and data location are in Canada. So they get all emails sent to the DL-Canada-All dynamic DL list.

She recently asked to be able to get emails based on the DL-US-All list.

((((((((RecipientType -eq 'UserMailbox') -and (-not(RecipientTypeDetailsValue -eq 'SharedMailbox')))) -and (CountryOrRegion -eq 'US'))) -and (Company -eq '**********'))) -and (-not(Name -like 'SystemMailbox{*')) -and (-not(Name -like 'SYS_{*')) -and (-not(RecipientTypeDetailsValue -eq 'MailboxPlan')) -and (-not(RecipientTypeDetailsValue -eq 'DiscoveryMailbox')) -and (-not(RecipientTypeDetailsValue -eq 'PublicFolderMailbox')) -and (-not(RecipientTypeDetailsValue -eq 'ArbitrationMailbox')) -and (-not(RecipientTypeDetailsValue -eq 'AuditLogMailbox')) -and (-not(RecipientTypeDetailsValue -eq 'AuxAuditLogMailbox')) -and (-not(RecipientTypeDetailsValue -eq 'SupervisoryReviewPolicyMailbox')))

These were created long before I got here, and I'm not comfortable in trying to alter this. Pretty sure you can't do it from the GUI in Exchange Admin, and I'm no where close to being proficient with Exchange PowerShell console to try.

What options, if any, are there to get her to have a copy of anything sent to this dynamic US DL?

My only idea of a workaround was for her to get a colleague in the US to set up a forwarding rule in their outlook to have any messages that come in from DL-US-All to forward a copy to colleagues email address.

Aside from that are there any other solutions that could work? You can't set a CountryOrRegion on a Contact so that wouldn't work. There's no way to set a CountryOrRegion on a DL so I can't make a DL of 1 to be nested.

Any ideas would be greatly appreciated.

Hey everybody,

I'm in the process of migrating one of our customers from an On-Prem Exchange 2019 server to Office 365.

We can't use the Hybrid configuration wizard since the customer is on a shared Exchange server which hosts mutiple customers...don't ask, I've only inherited this mess...

I've been using Code Two Office 365 Migration to copy all mailboxes to Office 365, which worked very well.

A couple of weeks ago, I wanted to switch over the customer to Office 365.

However, when I tested the email connectivity of the first mailbox, trying to send emails to internal and external recipients from Outlook Web App, I always received the following NDR right back:

550 5.7.140 Sending from the domain.com domain has been blocked by your email admin.

The MX record of the domain still points to our On-Prem Barracuda Mail Gateway. We filter all incoming mail and forward it to Office 365.

Outgoing mails are sent using Microsoft MX.

I only changed the autodiscover and spf records for the domain per Microsoft's instructions.

I cancelled the migration and undid all my changes when I couldn't figure out the cause.

Tonight I want to try a second time.

Just in case: Could there be any other reason for this NDR? All users are properly licensed, so this should not be an issue.

When passwords expire in AD, the 365 email (AD sync) keeps working for months. Why are they not locked out ? I realize account lockout is not the same as password expired however we would like to explore changing this but can't seem to find where this setting is?

Hi,

Just looking for high level experiences and overview for the following situation. I've done dozens of smaller migrations and mergers, but the scale of this one makes it a bit different.

Merging ten separate companies, migrating their ten separate M365 tenants (with associated public domains) into one central M365 tenant, alongside merging their on-prem Active Directories into one single AD.

The M365 tenants are all synced with Entra connect, and include Mail, Sharepoint, Onedrive, Teams. They all currently have their own public domains, and once migrated they'll be moved to a single unified public domain.

There are approximately 10000 users here.

Ideas of tool sets, experiences, timescales and gotchas would be much appreciated.

Thanks in advance...!