Quick M365 Updates
Microsoft Defender Introduces Manual Incident and Alert Creation
Learn how to create manual incidents and alerts in Microsoft Defender and investigate user reported threats beyond automated detections.
6 min read
Microsoft recently introduced manual incident creation in preview for Defender to help security teams investigate threats beyond automated detections. Analysts can now instantly track, manage, and correlate user reported threats and other security findings, even when no alert is generated automatically.
Microsoft has introduced two new service plans named ‘Entra Conditional Access for Agents’ and ‘Entra ID Protection for Agents’ under Microsoft 365 Agent and E7 licenses. Starting in July 2026, organizations using agent security capabilities must ensure they have the required Microsoft 365 Agent or E7 licenses to continue accessing these features without disruption. This blog explains the licensing update, its impact on organizations, and the steps admins should take to ensure AI agents remain protected.
Starting September 7, 2026, Microsoft Entra ID will require explicitly registered authentication methods for Self-Service Password Reset (SSPR) verification. This blog dives into the details of this security update and the critical actions admins must take to prepare.
Until now, organizations needed an Office 365 Extra File Storage add-on for additional SharePoint storage, which required fixed-capacity purchases that often led to unused costs. To address this, Microsoft has introduced a pay-as-you-go billing model for SharePoint storage in Microsoft 365. This allows organizations to pay only for the additional storage they consume beyond their included quota. In this blog, we’ll explore Microsoft’s pay-as-you-go SharePoint storage model and how it can help optimize costs.
The introduction of Device Soft Delete in Microsoft Entra ID (Public Preview) brings a much-needed recovery layer for device management. Instead of being permanently deleted, devices now move into a soft-deleted state, allowing admins a 30-day window to restore them when needed.
Starting in early June 2026, Microsoft Outlook will support external email tags within inbox rules, allowing users to automatically organize and categorize external emails for improved prioritization.
Struggling to automate secure monitor manage M365?
Try AdminDroid for Free! Shanchana is Microsoft 365 and Active Directory professional, focusing on governance-driven configurations and operational efficiency improvements in cloud environments. She emphasizes configuration-level guidance that increases operational visibility and improves consistency in day-to-day administrative work.
Learn how to create manual incidents and alerts in Microsoft Defender and investigate user reported threats beyond automated detections.
6 min read
Use custom account correlation rules in Microsoft Defender to link related identities and improve threat detection.
10 min read
Microsoft will require registered authentication methods for SSPR verification. Find unregistered users amd prepare for enforcement.
4 min read
Discover the free Microsoft 365 license cost optimization tool with 15+ actions to find hidden license costs, monthly savings, & cut costs.
12 min read
Discover how the Shadow AI page in Microsoft 365 helps you identify, monitor, and block unauthorized AI tools to reduce risk and secure usage.
4 min read
Discover best practices for Active Directory break glass accounts to ensure secure and reliable access during critical incidents.
11 min read
Block multi-tenant and consumer apps in Microsoft Entra using new sign-in audience restrictions in application policies.
5 min read
Learn how device-preferred credential logic replaces the most-recently-used logic in system-preferred MFA to deliver device-based, secure authentication.
4 min read
Explore Microsoft’s new Security Dashboard for AI in public preview to monitor AI assets, risks, and security posture in one place.
6 min read
Microsoft retires OneView and TrueTime in Outlook Web App by June 2026. Explore what this update means and how it affects users.
2 min read
Discover how to find the account lockout source in Active Directory to quickly pinpoint the cause and resolve recurring user lockouts.
12 min read
Explore Teams and Places features unlocked by the Microsoft Teams licensing update to manage workspaces smarter without Premium add-ons.
6 min read
Learn how to create, publish, apply, and automate retention labels to meet compliance and records management requirements.
14 min read
The Storm-2949 attack shows how hackers use different approaches until they gain full Microsoft 365 cloud access.
9 min read
Explore the new password Protection feature in Microsoft Defender and learn how to monitor and remediate password risks across providers.
5 min read
Microsoft Entra Tenant Governance helps manage and secure multiple Microsoft tenants, monitor configurations, govern shadow IT, and create new tenants with governance applied.
6 min read
Learn how to demote a domain controller in AD with pre-checks, graceful and forced demotion methods, metadata cleanup, and common fixes.
17 min read
Learn how Microsoft 365 Backup helps to restore individual file and folder in SharePoint and OneDrive directly from restore points.
4 min read
Learn how to implement the Active Directory tiered administration model to reduce credential exposure and prevent lateral movement attacks.
14 min read
Learn how the new Microsoft Graph Cloud Licensing API enhances Microsoft 365 license management with better visibility and control.
6 min read
Explore step-by-step methods to identify insecure RC4 usage in Active Directory Kerberos tickets and disable them to strengthen security.
16 min read
Understand Group Policy Objects in Active Directory and learn how GPOs work to control user and computer settings across your domain.
15 min read
Learn how Microsoft’s Slack to Teams migration tool helps move channels, messages, files, and more securely without deleting data from Slack.
6 min read
Understand FSMO roles in Active Directory, their types, purpose, and how to transfer or seize them to another domain controllers.
18 min read