
Microsoft 365 Community
Microsoft’s Mandatory MFA Enforcement for Admin Portals
Microsoft is enforcing mandatory MFA for all users to prevent account compromises. Find out what concerns admins have shown on its impact.
6 min read
Starting September 7, 2026, Microsoft Entra ID will require explicitly registered authentication methods for Self-Service Password Reset (SSPR) verification. This blog dives into the details of this security update and the critical actions admins must take to prepare.
Until now, organizations needed an Office 365 Extra File Storage add-on for additional SharePoint storage, which required fixed-capacity purchases that often led to unused costs. To address this, Microsoft has introduced a pay-as-you-go billing model for SharePoint storage in Microsoft 365. This allows organizations to pay only for the additional storage they consume beyond their included quota. In this blog, we’ll explore Microsoft’s pay-as-you-go SharePoint storage model and how it can help optimize costs.
The introduction of Device Soft Delete in Microsoft Entra ID (Public Preview) brings a much-needed recovery layer for device management. Instead of being permanently deleted, devices now move into a soft-deleted state, allowing admins a 30-day window to restore them when needed.
Starting in early June 2026, Microsoft Outlook will support external email tags within inbox rules, allowing users to automatically organize and categorize external emails for improved prioritization.
Microsoft has integrated the Power Automate workflow experience directly into SharePoint Online. This allows users to view, create, and manage workflows without leaving the SharePoint site interface. This also introduces a context-aware “Mad-Lib” style automation experience that automatically prefills trigger inputs such as SharePoint sites, lists, and libraries to simplify workflow creation.
Storm-2949 is a sophisticated identity-based attack campaign where a single compromised Microsoft 365 account can lead to wider access across Microsoft 365 and Azure environments. Instead of relying on malware, the attackers abused trusted Microsoft services, MFA workflows, tokens, and permissions to silently move deeper into the environment.
Struggling to automate secure monitor manage M365?
Try AdminDroid for Free!
Microsoft is enforcing mandatory MFA for all users to prevent account compromises. Find out what concerns admins have shown on its impact.
6 min read

Deploy Office 365, Generate Office 365 MFA Reports, Office 365 MFA Audit, Office 365 Secure Score and more.
4 min read

Howdy Admins, We are back with a new version of AdminDroid Office 365 Reporter v.3.6.0.0. As always, the new version comes with many new exciting & delicious features! Wanna take a sneak peek of what’s on the table? 100+ New Reports on Office 365 Secure Score data with history, MFA/2FA settings and status, Detailed License Expiry info, Subscription usage info, Password…
3 min read