Security
How AdminDroid Helps Detect Storm-2949 Attacks Early in Microsoft 365
Detect Storm-2949 attacks in Microsoft 365 using AdminDroid. Identify and act early before it escalates into a cloud breach
8 min read
Microsoft has officially announced that passkeys will become the default authentication method in Microsoft Entra, replacing Microsoft-provided SMS and voice authentication. The change begins rolling out on September 1, 2026, with the transition completing on February 1, 2027.
Microsoft is adding two new PowerShell settings that let admins control who can join federated group chats in Microsoft Teams. These settings are disabled by default and will roll out globally between late July and late September 2026.
Microsoft has introduced cross-tenant message recall in Exchange Online. This feature allows users to recall emails sent to external Microsoft 365 tenants. It is disabled by default and works only when the receiving organization explicitly enables it and adds the sender’s Microsoft Entra tenant IDs to an allow list via PowerShell. The rollout begins in mid-August 2026, delivering a secure recall experience for cross-organization collaboration.
Microsoft’s Network Data Security helps protect sensitive company data when people use AI tools, cloud apps, or websites outside of managed Microsoft 365 apps. It checks data in real time as it is being uploaded, pasted, or shared, and can block it if it breaks company rules. It works by combining Microsoft Purview’s data protection with Microsoft Entra’s network control to make sure sensitive information doesn’t accidentally leave the organization.
Microsoft recently introduced manual incident creation in preview for Defender to help security teams investigate threats beyond automated detections. Analysts can now instantly track, manage, and correlate user reported threats and other security findings, even when no alert is generated automatically.
Microsoft has introduced two new service plans named ‘Entra Conditional Access for Agents’ and ‘Entra ID Protection for Agents’ under Microsoft 365 Agent and E7 licenses. Starting in July 2026, organizations using agent security capabilities must ensure they have the required Microsoft 365 Agent or E7 licenses to continue accessing these features without disruption. This blog explains the licensing update, its impact on organizations, and the steps admins should take to ensure AI agents remain protected.
Struggling to automate secure monitor manage M365?
Try AdminDroid for Free! Kavya is a Microsoft 365 and Active Directory expert with 11 years of experience, focusing on security hardening and PowerShell-driven automation for large-scale administrative environments. Her work combines deep technical execution with clear structure, enabling administrators to automate controls, improve visibility, and strengthen security posture. She also supports technical validation to ensure accuracy and reliable real-world implementation.
Detect Storm-2949 attacks in Microsoft 365 using AdminDroid. Identify and act early before it escalates into a cloud breach
8 min read
Explore 10 best practices to secure admin accounts in a hybrid environment to reduce the attack surface & safeguard against evolving threats.
7 min read
Explore how to reset MFA using Microsoft 365 Admin Center & PowerShell. Download the Pre-built script to solve 25+ MFA reset scenarios.
8 min read
Check out 6 essential Microsoft 365 password settings to enhance security and improve Microsoft Secure Score.
6 min read
Discover AdminDroid, your ultimate tool for Office 365 reporting, available on Azure Marketplace - Gain insights and manage your M365 environment efficiently.
2 min read
Now, MS Graph has the ability to retrieve per-user MFA status for M365 users. Download this PowerShell script to export per-user MFA status report to CSV file.
4 min read
Generate insightful reports and create stunning visualizations from your spreadsheet data. Transform your data into visual insights with GPT-4o!
3 min read
Discover the top 5 Microsoft 365 features admins want to disable. Dive into the details and decide if it's time to hit that 'off' switch!
5 min read
This blog lists various Microsoft 365 services, products, technologies that are going to deprecate in 2024 - Admins can plan for necessary migrations or updates
6 min read
MS Graph exposes 'Last Successful Sign-in Date' for Microsoft 365 Users. Download the PowerShell script to export 10+ inactive users reports.
4 min read
Disable self-service purchase capability to avoid users signing up for Teams Premium trial directly. Act now and don't regret later.
2 min read
As an AdminDroid alternative, you can refer to this guide to get instant reports on Microsoft 365 and efficiently manage your organization.
14 min read
Learn how to deploy PowerShell scripts in Microsoft Intune to execute scripts across your managed Windows devices from a single deployment.
7 min read
Explore the new service plans for Agent Conditional Access and Identity Protection to ensure uninterrupted access to agent security features.
3 min read
Learn how to prevent users modify outlook signature using PowerShell and built-in policies to enforce consistent email branding.
10 min read
Learn about Device Soft Delete in Microsoft Entra ID and how deleted devices can be recovered within a 30-day window before permanent removal.
4 min read
Discover the free Microsoft 365 license cost optimization tool with 15+ actions to find hidden license costs, monthly savings, & cut costs.
12 min read
Learn the differences between server-side and client-side email signatures in M365, know their limitations, and choose the right approach.
6 min read
Discover best practices for Active Directory break glass accounts to ensure secure and reliable access during critical incidents.
11 min read
Explore the Account Discovery feature that finds existing user accounts in Entra ID applications and helps you identify unmanaged identities easily.
4 min read
Explore Microsoft 365’s modern change management model, including audience-based releases, Message Center updates, and MCP servers.
6 min read
Compare Microsoft 365 E5 vs E7's features, pricing, preview limitations, and decision factors to determine if the $99 E7 upgrade is worth it.
10 min read
With File Level Archiving in SharePoint Online, archive files to a lower-cost storage tier while preserving permissions, metadata & versions.
10 min read
Learn how to prevent calendar phishing attacks in Microsoft 365 and protect users from malicious meeting invites that bypass email security.
12 min read