About the Author
Paul is a former Microsoft MVP for Office Apps and Services. He works as a consultant, writer, and trainer specializing in Office 365 and Exchange Server. Paul no longer writes for Practical365.com.
You may withdraw your consent at any time. Please visit our Privacy Statement for additional information

In this blog, we explore why break-glass accounts are your lifeline when identity systems fail. Microsoft’s updated guidance calls for two cloud-only Entra ID accounts with phishing-resistant MFA and restricted AD Administrator accounts limited to domain controllers. Excluding them from Conditional Access, storing credentials offline, and testing regularly ensures your emergency access is a lifeline — not a liability.

On November 17, Microsoft announced the Exchange Admin API, a REST-based method of interacting with Exchange Online administrative functions. Having a new API sounds exciting, but in reality the Exchange Admin API is a limited tool to help Exchange Web Services (EWS) developers migrate their apps before Microsoft retires EWS in October 2026. That being said, here's how the API works.

On this episode of the Practical 365 Podcast, we cover the biggest announcements from Microsoft Ignite, New Copilot Capabilities, Agent 365, SharePoint turning 25, and more!