But First: What’s Lokka?
In this blog, we review Microsoft’s 2025 Digital Defense Report and highlight the trends you need to know. From a surge in ransomware targeting hybrid environments to identity-based attacks at record levels, the report makes one thing clear: resilience and strong identity protection are critical.
Managing devices across large organizations can be complex. Administrative Units (AUs) help scope admin rights, but what about newly registered devices? In this article, we explain how to automate adding devices to the correct AU using Microsoft Graph and Azure Automation runbooks with managed identities—eliminating manual steps and improving security.
Utility accounts exist in every Microsoft 365 tenant. These accounts are not intended for normal user activity and include accounts used for Exchange room and shared mailboxes and the break-glass or emergency accounts intended to allow administrators to sign-in if their usual accounts are blocked. This article shows how to use PowerShell and the Microsoft Graph to check sign-in events to ensure that the accounts aren't being accessed.
Microsoft 365 now runs on agentic AI, but tracking custom, shared, and ISV agents isn’t simple. This post breaks down where agents live, how the Admin Center inventory works, and why scalable management remains a challenge. Plus, what’s next with Graph API.
A request came in about how to find unused proxy addresses for Exchange Online mail-enabled objects. There's no out-of-the-box report available for proxy address usage, but we can solve the problem by using a PowerShell script to download historical message trace data to check every proxy address for all mailboxes against. The question then is what to do with the unused proxy addresses?
In this episode of the Practical 365 Podcast, Steve Goodman and Paul Robichaux discuss major Exchange updates – including the fallout from a recent AWS outage, Microsoft’s new tools to finally remove your last on-premises Exchange server, the final patches for Exchange 2016/2019, Copilot’s upcoming memory & personalization upgrade, and more!
In this episode of Practical AI, we dive into using Lokka, a free tool for working with the Microsoft Graph, built by Microsoft’s Merill Fernando. Lokka lets you query and manage your Microsoft 365 tenant using natural language, removing the need for complex scripting.
Despite the best efforts of anti-spam solutions, some unwanted messages usually get through to user inboxes. This article explains how to analyze messages that end up in Junk Email and use the results to create a transport rule to block future traffic from the spammy domains.
In this blog, we explore how organizations can extend Microsoft 365 Copilot Chat using Copilot agents—without needing full Copilot licenses. By leveraging consumption-based billing and Copilot credits, admins can enable powerful AI integrations while managing costs.
This article provides an overview of the general feature, explains how to enable it in the Teams Admin Center, and outlines what is crucial for a Teams Administrator to ensure the feature works as expected.
Microsoft 365 comes with many usage report API covering different workloads. This article explains how to use PowerShell to extract usage data for multiple workloads to combine together to create a holistic view of user account activity within a Microsoft 365 tenant.
In this blog, we take a closer look at CVE-2025-55241, a critical Entra ID flaw that briefly allowed attackers to impersonate Global Admins across any tenant, no phishing or passwords required. While Microsoft moved fast to patch the issue, it exposed how deeply legacy code can undermine modern security efforts. We’ll break down what happened, why it matters, and what admins should do now to stay protected.
