Quick M365 Updates
An Interesting Find: Agent Session Risk in Microsoft Entra Conditional Access
Discover the hidden agent session risk levels condition in Conditional Access and its role in AI agent security.
6 min read
A new hidden condition in Microsoft Entra Conditional Access called Agent Session Risk brings session-level risk evaluation to AI agent security. Let's explore what this condition does and how it can shape your Conditional Access strategy for AI agents.
Microsoft is preparing to introduce 'Unified roles (preview)' in the Microsoft Entra admin center, enabling precise access across services through a single role assignment and controlled delegation. More service integrations and capabilities are planned for the future.
Guest Lifecycle Policies in Microsoft Entra ID help automate the governance of external guest accounts by checking them against configured lifecycle rules and automatically disabling or deleting accounts that no longer meet the requirements.
Entra ID is retiring Microsoft-provided SMS and voice authentication for self-service password reset, with a 50-day transition period for organizations. Admins must identify affected users and configure alternative recovery methods for SSPR to avoid password reset disruptions.
SharePoint introduces a new site creation experience that allows admins to redirect users to a custom URL when they try to create a new site. The destination can be a request form, a third-party approval tool, or another page that fits the organization's process.
Microsoft introduces Conditional Access policy plans in public preview to help admins configure shared targeting once and manage different security requirements more efficiently. They work alongside existing Conditional Access policies, which continue to be enforced as before.
Struggling to automate secure monitor manage M365?
Try AdminDroid for Free! Shanchana is Microsoft 365 and Active Directory professional, focusing on governance-driven configurations and operational efficiency improvements in cloud environments. She emphasizes configuration-level guidance that increases operational visibility and improves consistency in day-to-day administrative work.
Discover the hidden agent session risk levels condition in Conditional Access and its role in AI agent security.
6 min read
Learn about Microsoft Entra’s updates to agent identity blueprints, including default user creation access & new admin consent requirements.
6 min read
Uncover hidden privilege risks in Active Directory nested groups. Explore common causes and best practices to fix those security risks.
7 min read
Explore 12 free Active Directory tools for management, security assessment, attack-path analysis, hardening, Group Policy, AD CS, DNS, etc.
12 min read
Learn how to create manual incidents and alerts in Microsoft Defender and investigate user reported threats beyond automated detections.
6 min read
Use custom account correlation rules in Microsoft Defender to link related identities and improve threat detection.
10 min read
Microsoft will require registered authentication methods for SSPR verification. Find unregistered users amd prepare for enforcement.
4 min read
Discover the free Microsoft 365 license cost optimization tool with 15+ actions to find hidden license costs, monthly savings, & cut costs.
12 min read
Discover how the Shadow AI page in Microsoft 365 helps you identify, monitor, and block unauthorized AI tools to reduce risk and secure usage.
4 min read
Discover best practices for Active Directory break glass accounts to ensure secure and reliable access during critical incidents.
11 min read
Block multi-tenant and consumer apps in Microsoft Entra using new sign-in audience restrictions in application policies.
5 min read
Learn how device-preferred credential logic replaces the most-recently-used logic in system-preferred MFA to deliver device-based, secure authentication.
4 min read
Enforce Conditional Access on Outlook attachments to block download, preview, and upload actions when requirements aren't met.
6 min read
Explore the new Communicator app in Microsoft Teams to send targeted announcements and track acknowledgment status.
6 min read
Explore how granular Microsoft Graph API permissions support least-privilege access and improve security and governance.
5 min read
Microsoft Teams Live Chat is retiring in October 2026. Learn about key retirement dates, impacted workflows, and steps to prepare for an alternative.
3 min read
Learn different ways to disable Print Spooler service on domain controllers and follow best practices to avoid PrintNightmare risk.
7 min read
Learn how to create, publish, apply, and automate retention labels to meet compliance and records management requirements.
15 min read
The Storm-2949 attack shows how hackers use different approaches until they gain full Microsoft 365 cloud access.
9 min read
Explore the new password Protection feature in Microsoft Defender and learn how to monitor and remediate password risks across providers.
5 min read
Microsoft Entra Tenant Governance helps manage and secure multiple Microsoft tenants, monitor configurations, govern shadow IT, and create new tenants with governance applied.
6 min read
Learn how to demote a domain controller in AD with pre-checks, graceful and forced demotion methods, metadata cleanup, and common fixes.
17 min read
Learn how Microsoft 365 Backup helps to restore individual file and folder in SharePoint and OneDrive directly from restore points.
4 min read
Learn how to implement the Active Directory tiered administration model to reduce credential exposure and prevent lateral movement attacks.
15 min read