Implement it, Wire it in, Automate it
Keeping track of licenses in a Microsoft 365 tenant can be tiresome. However, an annual licensing audit is a great way to make sure that you pay Microsoft what it's due and no more. Knowing the details of who has what licenses and why is also a good preparation for Microsoft software audits and commercial discussions.
Priority cleanup is a Microsoft Purview solution that allows tenants to remove items even when the items are subject to retention hold. That sounds like Priority cleanup goes against the nature of data governance, but sometimes it's more important to remove items than to keep them for their full retention period. This article explains how Priority Cleanup works and some of the important concepts that you need to master before removing anything.
This article describes how to use PowerShell to create a report for Microsoft Purview role groups and their memberships, including identifying unknown objects in group membership and expanding the amount of information reported for each role holder.
In this blog, we explore why break-glass accounts are your lifeline when identity systems fail. Microsoft’s updated guidance calls for two cloud-only Entra ID accounts with phishing-resistant MFA and restricted AD Administrator accounts limited to domain controllers. Excluding them from Conditional Access, storing credentials offline, and testing regularly ensures your emergency access is a lifeline — not a liability.
On November 17, Microsoft announced the Exchange Admin API, a REST-based method of interacting with Exchange Online administrative functions. Having a new API sounds exciting, but in reality the Exchange Admin API is a limited tool to help Exchange Web Services (EWS) developers migrate their apps before Microsoft retires EWS in October 2026. That being said, here's how the API works.
On this episode of the Practical 365 Podcast, we cover the biggest announcements from Microsoft Ignite, New Copilot Capabilities, Agent 365, SharePoint turning 25, and more!
This article describes the steps to configure Microsoft 365 Copilot connectors to extend SharePoint Enterprise Search with Microsoft Graph.
Understanding the set of registered and enterprise apps active in a Microsoft 365 tenant is important. Attackers can sneak in and plant an app to exfiltrate or otherwise steal data. This article explains how to use PowerShell to create a service principal analysis report that highlights common problems and gives tenant administrators the data needed to manage apps.
In this blog, we review Microsoft’s 2025 Digital Defense Report and highlight the trends you need to know. From a surge in ransomware targeting hybrid environments to identity-based attacks at record levels, the report makes one thing clear: resilience and strong identity protection are critical.
Managing devices across large organizations can be complex. Administrative Units (AUs) help scope admin rights, but what about newly registered devices? In this article, we explain how to automate adding devices to the correct AU using Microsoft Graph and Azure Automation runbooks with managed identities—eliminating manual steps and improving security.
Utility accounts exist in every Microsoft 365 tenant. These accounts are not intended for normal user activity and include accounts used for Exchange room and shared mailboxes and the break-glass or emergency accounts intended to allow administrators to sign-in if their usual accounts are blocked. This article shows how to use PowerShell and the Microsoft Graph to check sign-in events to ensure that the accounts aren't being accessed.
Microsoft 365 now runs on agentic AI, but tracking custom, shared, and ISV agents isn’t simple. This post breaks down where agents live, how the Admin Center inventory works, and why scalable management remains a challenge. Plus, what’s next with Graph API.
