If you're running #Windows #Server 2022 hopefully you're already aware of this, but good reminder than it will reach the end of mainstream support on October 13th. deltapulse.app/item/MC1429856

90-Day Reminder: Windows Server 2022 will reach end of mainstream support on October 13, 2026

Service: Windows. Category: Stay Informed. Microsoft 365 change intelligence and updates

deltapulse.app

Reminder: Exchange 2016 and 2019 ESU Program Ends in October 2026 | Microsoft Community Hub! 🦋 techcommunity.microsoft.com/blog/exchang...

Reminder: Exchange 2016 and 2019 ESU Program Ends in October 2026 | Microsoft Community Hub

We wanted to provide a reminder that Exchange 2016 and 2019 ESU program ends in October 2026.  

techcommunity.microsoft.com

𝐇𝐨𝐰 𝐭𝐨 𝐜𝐫𝐞𝐚𝐭𝐞 𝐚 𝐖𝐏𝐀3 𝐖𝐢-𝐅𝐢 𝐩𝐫𝐨𝐟𝐢𝐥𝐞 𝐟𝐨𝐫 𝐖𝐢𝐧𝐝𝐨𝐰𝐬 𝐢𝐧 𝐌𝐢𝐜𝐫𝐨𝐬𝐨𝐟𝐭 𝐈𝐧𝐭𝐮𝐧𝐞 Microsoft Intune still cannot natively create a Wi-Fi profile with WPA3-Personal security at this time. Within the configuration templates, there is only Wi-Fi with WPA/WPA2 security, but WPA3 is missing.

𝐇𝐨𝐰 𝐂𝐨𝐧𝐝𝐢𝐭𝐢𝐨𝐧𝐚𝐥 𝐀𝐜𝐜𝐞𝐬𝐬 𝐏𝐨𝐥𝐢𝐜𝐢𝐞𝐬 𝐀𝐫𝐞 𝐄𝐯𝐚𝐥𝐮𝐚𝐭𝐞𝐝 𝐢𝐧 𝐌𝐢𝐜𝐫𝐨𝐬𝐨𝐟𝐭 𝐄𝐧𝐭𝐫𝐚 𝐈𝐃 Understanding how Conditional Access policies are evaluated in Microsoft Entra ID is absolutely essential if you are involved in their creation or management.

Great to see my post on Microsoft Entra ID access packages shared in such a valuable newsletter - thanks for the shoutout, @merill.net

Merill Fernando 💚@merill.net · 6mo ago

📢 This week's Entra newsletter is out. Get it at https://entra.news

𝐇𝐨𝐰 𝐭𝐨 𝐮𝐬𝐞 𝐚𝐜𝐜𝐞𝐬𝐬 𝐩𝐚𝐜𝐤𝐚𝐠𝐞𝐬 𝐭𝐨 𝐦𝐚𝐧𝐚𝐠𝐞 𝐠𝐫𝐨𝐮𝐩 𝐦𝐞𝐦𝐛𝐞𝐫𝐬𝐡𝐢𝐩𝐬 Access packages allow you to dynamically manage group, Teams, application, and SharePoint site membership based on user requests.

𝐇𝐨𝐰 𝐭𝐨 𝐠𝐞𝐭 𝐮𝐧𝐥𝐢𝐦𝐢𝐭𝐞𝐝 𝐦𝐚𝐢𝐥𝐛𝐨𝐱 𝐬𝐢𝐳𝐞 𝐢𝐧 𝐄𝐱𝐜𝐡𝐚𝐧𝐠𝐞 𝐎𝐧𝐥𝐢𝐧𝐞 Exchange Online Plan 1 licenses generally have a primary mailbox capacity of 50 GB. Exchange Online Plan 2 licenses have a capacity of 100 GB.

Is there any way to create a Planner task directly from an email? Ideally including the email content and attachments. I assumed this would be basic functionality, but I can’t find such an option anywhere. #planner

Looks like Christmas is coming early this year 🤷‍♂️

Nicky De Westelinck@nickydewestelinck.be · 9mo ago

After Microsoft Security Copilot, Microsoft now also adds Microsoft Intune Suite in your Microsoft 365 E5 (and E3) licence! 🔥 #Microsoft365 #MSIntune 🔗 aka.ms/IntuneM365Blog

New post: focusing on the key biggest Microsoft 365 security considerations. READ: campbell.scot/micros... When we talk about Microsoft 365 security, we are talking about two things: (a) securing Microsoft 365 the platform, (b) using Microsoft 365 security tooling.

Microsoft 365: The Essential 10 Security Considerations - Ru Campbell MVP

When we talk about Microsoft 365 security, we are talking about two things: The latter can be used to achieve the former, as well as other (non-Microsoft 365) platforms. For example, using Defender for Endpoint on a Linux server in AWS, or using Entra for single sign on to Salesforce. Given its omnipresence in enterprise IT, Microsoft 365 security’s vastness (and value) needs to be front-of-mind for all tenant administrators. The Essential 10 is…

campbell.scot

@cloudflare.social is so broken now that even their status page is broken 🧐 #cloudflaredown

New video: 5 common Entra ID guests mistakes (Entra B2B) • excessive directory visibility • ignored cross-tenant defaults • untrusted MFA & device states • open SharePoint sharing • no guest lifecycle There's tons more! But here's a starter WATCH: youtu.be/AXuj-U9p3jU

After yesterday's interesting #Copilot+#OneDrive event I took a much deeper look at the 'Add shortcut to OneDrive' #SharePoint feature. Microsoft have declared this as the direction of travel. At first it looked great. Until I dug deeper. What I found is pretty horrifying. Blog inbound...

Chaos is exactly where our work begins. Our job is to bring clarity, calm, and momentum—fast. Watch the video from my colleague Adrian Hill on our Microsoft Security blog. www.microsoft.com/en-us/securi...

Did you know Entra ID Protection never automatically clears Medium or High risk? We either need to use Risk Based Conditional Access policies to remediate or an admin needs to manually remediate User risk = password reset Sign-in risk = require MFA learn.microsoft.com/...

Microsoft introduced new Sentinel commitment tier for SMBs. The 50 GB commitment tier is available in public preview, with promotional pricing starting October 1, 2025, until March 31, 2026. Customers who sign up during this period will lock in promotional pricing until March 31, 2027.

A 3 picture story of why you should default quarantine password protected files and enforce SmartScreen without allowing user bypass...

Seriously, Apple? That plastic-like white back on your silver flagship iPhone looks awful. This might be the ugliest iPhone ever, and I’m seriously thinking about returning it purely because of the design.

IMHO - Worry less about how long tokens are valid for, worry more about protecting the tokens, both on the client and during authentication Obviously we need phishing resistant auth, but also focus on client hardening (app control, EDR, etc.) and VPN/ZTNA with enforced CAE

Wow, I totally missed this change! Apparently since July, we've been able to use Asset rules management to use device details, like name, domain, OS, and other tags, to dynamically apply MDE-Management for MDE attach 😎 learn.microsoft.com/...

I love passkeys in Microsoft Authenticator, but rolling them out with Compliance and/or App Protection Policies has not been as easy as it should be... But I have good news - we can create a better experience without introducing significant gaps :)

Improving passkey registration experiences

Lets see what we can do about minimizing passkey deployment issues with Compliance and App Protection Policy requirements :)

nathanmcnulty.com

𝗛𝗼𝘄 𝘁𝗼 𝗮𝘂𝘁𝗼𝗺𝗮𝘁𝗶𝗰𝗮𝗹𝗹𝘆 𝘂𝗽𝗱𝗮𝘁𝗲 𝗮𝗽𝗽𝗹𝗶𝗰𝗮𝘁𝗶𝗼𝗻𝘀 𝗼𝗻 𝗰𝗼𝗺𝗽𝘂𝘁𝗲𝗿𝘀 𝗶𝗻 𝗠𝗶𝗰𝗿𝗼𝘀𝗼𝗳𝘁 𝗜𝗻𝘁𝘂𝗻𝗲 Microsoft Intune does not have any built-in options for updating installed applications on Windows computers.

Microsoft has been ranked #1 in the worldwide modern endpoint security market share for the third year in a row (IDC, 2024).

The financially motivated threat actor Storm-0501 has continuously evolved to achieve sharpened focus on cloud-based TTPs as their primary objective shifted from deploying on-premises endpoint ransomware to using cloud-based ransomware tactics. msft.it/63326sZC6E

Storm-0501’s evolving techniques lead to cloud-based ransomware | Microsoft Security Blog

Financially motivated threat actor Storm-0501 has continuously evolved their campaigns to achieve sharpened focus on cloud-based tactics, techniques, and procedures (TTPs). While the threat actor has been known for targeting hybrid cloud environments, their primary objective has shifted from deploying on-premises endpoint ransomware to using cloud-based ransomware tactics.

msft.it

For incident response to be successful, the proper tools and logging systems should be in place—but that is usually easier said than done.

Convenient reminder to stop what you’re doing and enforce browser extension allow listing.

We’re excited to announce the general availability of Windows Backup for Organizations!

Seamless SSO is a legacy setting only for very old and unsupported systems. If you have it turned on, go and turn it off. If you must keep it on, ať least rotate the kerberos deception key every month.

Nathan McNulty@nathanmcnulty.com · 12mo ago

Seamless SSO is a security risk, and many orgs enabeld it without knowing and are now stuck wondering what might break if they turn it off... Since Microsoft provides no help identifying actual usage, I did some research so you can safely turn it off :) nathanmcnulty.com/bl...

Get the latest Windows quality updates during the out-of-box experience (OOBE) by default. This much awaited improvement is coming to your eligible Microsoft Entra joined or Microsoft Entra hybrid joined devices running Windows 11, version 22H2 and later.

As enterprise defenses continue to mature, threat actors are shifting toward quieter, more efficient techniques. Attackers are increasingly using native tools and stealthy methods to operate under the radar.