Until now, organizations needed an Office 365 Extra File Storage add-on for additional SharePoint storage, which required fixed-capacity purchases that often led to unused costs. To address this, Microsoft has introduced a pay-as-you-go billing model for SharePoint storage in Microsoft 365. This allows organizations to pay only for the additional storage they consume beyond their included quota. In this blog, we’ll explore Microsoft’s pay-as-you-go SharePoint storage model and how it can help optimize costs.
The introduction of Device Soft Delete in Microsoft Entra ID (Public Preview) brings a much-needed recovery layer for device management. Instead of being permanently deleted, devices now move into a soft-deleted state, allowing admins a 30-day window to restore them when needed.
Starting in early June 2026, Microsoft Outlook will support external email tags within inbox rules, allowing users to automatically organize and categorize external emails for improved prioritization.
Microsoft has integrated the Power Automate workflow experience directly into SharePoint Online. This allows users to view, create, and manage workflows without leaving the SharePoint site interface. This also introduces a context-aware “Mad-Lib” style automation experience that automatically prefills trigger inputs such as SharePoint sites, lists, and libraries to simplify workflow creation.
Storm-2949 is a sophisticated identity-based attack campaign where a single compromised Microsoft 365 account can lead to wider access across Microsoft 365 and Azure environments. Instead of relying on malware, the attackers abused trusted Microsoft services, MFA workflows, tokens, and permissions to silently move deeper into the environment.
The new Security Detection Report in the Teams admin center helps admins monitor messaging threats across Teams, including impersonation attempts, malicious links, and weaponizable file types. Available from late June 2026, it enables admins to review threats, export detection details, and block malicious external users identified in the report.
Struggling to automate secure monitor manage M365?
Try AdminDroid for Free!
Kanaga is a Microsoft 365 and Active Directory specialist focused on security-centric configurations and practical administrative use cases. By translating security concepts into approachable operational steps, she enables admins to implement recommendations confidently while maintaining stable and secure environments.
Learn how to securely configure the My Staff portal in Microsoft Entra ID using PIM and Conditional Access to protect delegated admin access.
9 min read
Facing Microsoft Authenticator issues? Fix push notification failures, account transfer problems, etc, with this troubleshooting guide.
13 min read
Explore the new password Protection feature in Microsoft Defender and learn how to monitor and remediate password risks across providers.
5 min read
External sharing now uses Entra B2B identity-based access and email OTP is no longer supported for accessing SharePoint and OneDrive content.
6 min read
Explore how ConsentFix attack abuses trusted Microsoft 365 first-party app access and learn mitigations to prevent OAuth token misuse.
15 min read
Explore step-by-step methods to identify insecure RC4 usage in Active Directory Kerberos tickets and disable them to strengthen security.
16 min read
Discover more about the new Exchange Online PowerShell cmdlet that lets admins change meeting organizer without recreating meetings.
5 min read
Messaging safety defaults in Microsoft Teams are now enabled by default. This strengthens security & reduces exposure to malicious contents.
3 min read
Monitor tenant configuration in Microsoft 365 with UTCM APIs to detect drift and maintain compliant settings across multiple workloads.
5 min read
Microsoft’s new Intune security enforcement could block access to outdated M365 apps like Outlook & Teams, if latest versions aren’t updated.
5 min read
Learn how to prevent Teams sprawl with 10 proven strategies to improve governance and reduce security risks.
12 min read
Learn how Microsoft’s new Extended Service Term replaces the free 90-day grace period to keep services active while finalizing renewal plan.
3 min read
Learn how to reset the Default Domain Policy and Default Domain Controllers Policy in Active Directory to restore back their factory state.
10 min read
Import the leave management system using Power Apps to streamline leave requests, approvals, and tracking status in one place.
10 min read
Learn how device-preferred credential logic replaces the most-recently-used logic in system-preferred MFA to deliver device-based, secure authentication.
4 min read