Quick M365 Updates
Manage Federated Group Chats with Teams PowerShell Controls
Use EnableExternalAccessRestrictionsForChatParticipants, EnableMutualFederationForChatParticipants to strengthen Teams federated group chats.
5 min read
Microsoft has officially announced that passkeys will become the default authentication method in Microsoft Entra, replacing Microsoft-provided SMS and voice authentication. The change begins rolling out on September 1, 2026, with the transition completing on February 1, 2027.
Microsoft is adding two new PowerShell settings that let admins control who can join federated group chats in Microsoft Teams. These settings are disabled by default and will roll out globally between late July and late September 2026.
Microsoft has introduced cross-tenant message recall in Exchange Online. This feature allows users to recall emails sent to external Microsoft 365 tenants. It is disabled by default and works only when the receiving organization explicitly enables it and adds the sender’s Microsoft Entra tenant IDs to an allow list via PowerShell. The rollout begins in mid-August 2026, delivering a secure recall experience for cross-organization collaboration.
Microsoft’s Network Data Security helps protect sensitive company data when people use AI tools, cloud apps, or websites outside of managed Microsoft 365 apps. It checks data in real time as it is being uploaded, pasted, or shared, and can block it if it breaks company rules. It works by combining Microsoft Purview’s data protection with Microsoft Entra’s network control to make sure sensitive information doesn’t accidentally leave the organization.
Microsoft recently introduced manual incident creation in preview for Defender to help security teams investigate threats beyond automated detections. Analysts can now instantly track, manage, and correlate user reported threats and other security findings, even when no alert is generated automatically.
Microsoft has introduced two new service plans named ‘Entra Conditional Access for Agents’ and ‘Entra ID Protection for Agents’ under Microsoft 365 Agent and E7 licenses. Starting in July 2026, organizations using agent security capabilities must ensure they have the required Microsoft 365 Agent or E7 licenses to continue accessing these features without disruption. This blog explains the licensing update, its impact on organizations, and the steps admins should take to ensure AI agents remain protected.
Struggling to automate secure monitor manage M365?
Try AdminDroid for Free! Kanaga is a Microsoft 365 and Active Directory specialist focused on security-centric configurations and practical administrative use cases. By translating security concepts into approachable operational steps, she enables admins to implement recommendations confidently while maintaining stable and secure environments.
Use EnableExternalAccessRestrictionsForChatParticipants, EnableMutualFederationForChatParticipants to strengthen Teams federated group chats.
5 min read
Learn different ways to disable Print Spooler service on domain controllers and follow best practices to avoid PrintNightmare risk.
7 min read
Learn how to securely configure the My Staff portal in Microsoft Entra ID using PIM and Conditional Access to protect delegated admin access.
9 min read
Facing Microsoft Authenticator issues? Fix push notification failures, account transfer problems, etc, with this troubleshooting guide.
13 min read
Explore the new password Protection feature in Microsoft Defender and learn how to monitor and remediate password risks across providers.
5 min read
External sharing now uses Entra B2B identity-based access and email OTP is no longer supported for accessing SharePoint and OneDrive content.
6 min read
Explore how ConsentFix attack abuses trusted Microsoft 365 first-party app access and learn mitigations to prevent OAuth token misuse.
15 min read
Explore step-by-step methods to identify insecure RC4 usage in Active Directory Kerberos tickets and disable them to strengthen security.
16 min read
Discover more about the new Exchange Online PowerShell cmdlet that lets admins change meeting organizer without recreating meetings.
6 min read
Messaging safety defaults in Microsoft Teams are now enabled by default. This strengthens security & reduces exposure to malicious contents.
3 min read
Monitor tenant configuration in Microsoft 365 with UTCM APIs to detect drift and maintain compliant settings across multiple workloads.
5 min read
Microsoft’s new Intune security enforcement could block access to outdated M365 apps like Outlook & Teams, if latest versions aren’t updated.
5 min read
Learn how to create manual incidents and alerts in Microsoft Defender and investigate user reported threats beyond automated detections.
6 min read
Learn how to reset the Default Domain Policy and Default Domain Controllers Policy in Active Directory to restore back their factory state.
10 min read
Import the leave management system using Power Apps to streamline leave requests, approvals, and tracking status in one place.
10 min read
Learn how device-preferred credential logic replaces the most-recently-used logic in system-preferred MFA to deliver device-based, secure authentication.
4 min read