Microsoft has broadened and deepened the functionality available through sensitivity labels since their introduction in 2018. This article explains the basics of sensitivity labels and highlights some of the areas where important changes have occurred.
RBAC for Applications is a new method to secure Azure AD app access to Exchange Online mailboxes. In this article, we explain how to use Managed Identities in Azure Automation with RBAC for Applications making sure that scripts can only access selected mailboxes.
Microsoft is deploying a new version of the Teams webinar functionality to tenants. The new implementation is more functional and easier to use, and the impression is that this is a very simple but powerful implementation of a webinar management system.
Here’s to another year of practical advice on all things Microsoft! Practical 365 is wrapping up the year with a whopping 200+ articles, focusing on topics such as PowerShell, Exchange, Azure AD, Teams, and much more. This article shares 9 must-read posts, recommended by Steve Goodman, Tony Redmond, and Paul Robichaux.
Security researchers love to report software vulnerabilities that they find. That's their role and it's a valuable contribution to the technical community. However, some of the reports about Microsoft 365 flaws are over-hyped and under-considered, like a recent example covering the risk of phishing in the Exchange Online Direct Send feature.
Adaptive retention policies are great, but they require high-end Office 365 or Microsoft 365 licenses. The solution is to build your own version using PowerShell and Azure Automation. The code is reasonably straightforward and is a practical example of how to replicate a Microsoft 365 feature in your own way.
Microsoft has released the public preview of RBAC for Applications. The new mechanism allows tenants to control the access Azure AD apps have to mailboxes at a granular level. RBAC for Applications will replace application access policies.
This article explains how to use the Microsoft Graph API and PowerShell to extract meeting data from the calendars of room mailboxes to generate statistics about the usage of the rooms. Only confirmed meetings are included in the data.
Azure AD and Exchange Online store information about user principal names and email addresses, but they don't store the domain name of an account. In this article, we explain how to use a custom attribute to store the domain name and then use that with an adaptive scope in a Microsoft 365 retention policy.
Outlook groups and shared mailboxes both help small teams work with shared email. The decision as to which to use depends on the exact needs the team has. Microsoft has given Outlook groups some useful enhancements recently, but shared mailboxes are still the most email-friendly choice.
Now that they've disabled basic authentication for email connection protocols, Microsoft is doing the same for the Autodiscover service. This makes sense. There's no point in allowing basic authentication for Autodiscover when clients can't use basic authentication to connect. Microsoft will therefore turn off basic authentication for Autodiscover as it removes basic authentication for protocols like POP3, EAS, IMAP4, EWS, and MAPI.
Microsoft plans to launch a Pay As You Go backup and restore service for Exchange Online and SharePoint Online as part of its Syntex content management suite. This is new ground for Microsoft as they've never offered a backup service for Microsoft 365 before. How will Syntex compare to ISV backup services? Time will tell!
