Starting September 7, 2026, Microsoft Entra ID will require explicitly registered authentication methods for Self-Service Password Reset (SSPR) verification. This blog dives into the details of this security update and the critical actions admins must take to prepare.
Until now, organizations needed an Office 365 Extra File Storage add-on for additional SharePoint storage, which required fixed-capacity purchases that often led to unused costs. To address this, Microsoft has introduced a pay-as-you-go billing model for SharePoint storage in Microsoft 365. This allows organizations to pay only for the additional storage they consume beyond their included quota. In this blog, we’ll explore Microsoft’s pay-as-you-go SharePoint storage model and how it can help optimize costs.
The introduction of Device Soft Delete in Microsoft Entra ID (Public Preview) brings a much-needed recovery layer for device management. Instead of being permanently deleted, devices now move into a soft-deleted state, allowing admins a 30-day window to restore them when needed.
Starting in early June 2026, Microsoft Outlook will support external email tags within inbox rules, allowing users to automatically organize and categorize external emails for improved prioritization.
Microsoft has integrated the Power Automate workflow experience directly into SharePoint Online. This allows users to view, create, and manage workflows without leaving the SharePoint site interface. This also introduces a context-aware “Mad-Lib” style automation experience that automatically prefills trigger inputs such as SharePoint sites, lists, and libraries to simplify workflow creation.
Storm-2949 is a sophisticated identity-based attack campaign where a single compromised Microsoft 365 account can lead to wider access across Microsoft 365 and Azure environments. Instead of relying on malware, the attackers abused trusted Microsoft services, MFA workflows, tokens, and permissions to silently move deeper into the environment.
Struggling to automate secure monitor manage M365?
Try AdminDroid for Free!
Shanchana is Microsoft 365 and Active Directory professional, focusing on governance-driven configurations and operational efficiency improvements in cloud environments. She emphasizes configuration-level guidance that increases operational visibility and improves consistency in day-to-day administrative work.
Microsoft will require registered authentication methods for SSPR verification. Find unregistered users amd prepare for enforcement.
4 min read
Discover the free Microsoft 365 license cost optimization tool with 15+ actions to find hidden license costs, monthly savings, & cut costs.
12 min read
Discover how the Shadow AI page in Microsoft 365 helps you identify, monitor, and block unauthorized AI tools to reduce risk and secure usage.
4 min read
Discover best practices for Active Directory break glass accounts to ensure secure and reliable access during critical incidents.
11 min read
Block multi-tenant and consumer apps in Microsoft Entra using new sign-in audience restrictions in application policies.
5 min read
Learn how device-preferred credential logic replaces the most-recently-used logic in system-preferred MFA to deliver device-based, secure authentication.
4 min read
Explore Microsoft’s new Security Dashboard for AI in public preview to monitor AI assets, risks, and security posture in one place.
6 min read
Microsoft retires OneView and TrueTime in Outlook Web App by June 2026. Explore what this update means and how it affects users.
2 min read
Discover how to find the account lockout source in Active Directory to quickly pinpoint the cause and resolve recurring user lockouts.
12 min read
Explore Teams and Places features unlocked by the Microsoft Teams licensing update to manage workspaces smarter without Premium add-ons.
6 min read
Learn how Microsoft now enables admins to manage version expiration for audio and video files in SharePoint Online to reduce storage.
6 min read
Explore Microsoft Purview’s new Data Security Posture Management (DSPM), which secure both user and AI data interactions.
5 min read
The Storm-2949 attack shows how hackers use different approaches until they gain full Microsoft 365 cloud access.
9 min read
Explore the new password Protection feature in Microsoft Defender and learn how to monitor and remediate password risks across providers.
5 min read
Microsoft Entra Tenant Governance helps manage and secure multiple Microsoft tenants, monitor configurations, govern shadow IT, and create new tenants with governance applied.
6 min read
Learn how to demote a domain controller in AD with pre-checks, graceful and forced demotion methods, metadata cleanup, and common fixes.
17 min read
Learn how Microsoft 365 Backup helps to restore individual file and folder in SharePoint and OneDrive directly from restore points.
4 min read
Learn how to implement the Active Directory tiered administration model to reduce credential exposure and prevent lateral movement attacks.
14 min read
Learn how the new Microsoft Graph Cloud Licensing API enhances Microsoft 365 license management with better visibility and control.
6 min read
Explore step-by-step methods to identify insecure RC4 usage in Active Directory Kerberos tickets and disable them to strengthen security.
16 min read
Understand Group Policy Objects in Active Directory and learn how GPOs work to control user and computer settings across your domain.
15 min read
Learn how Microsoft’s Slack to Teams migration tool helps move channels, messages, files, and more securely without deleting data from Slack.
6 min read
Understand FSMO roles in Active Directory, their types, purpose, and how to transfer or seize them to another domain controllers.
18 min read
Discover the key Microsoft 365 security settings added in 2025 and learn which features to enable or disable to strengthen security posture.
12 min read