Businesses relying on Microsoft 365 often share files and folders in SharePoint Online to collaborate with internal and external stakeholders. Users create different types of sharing links depending on how much access they want to give others. Over time, these links can become difficult to track, increasing the risk of…
8 min read
When applications are registered in Microsoft Entra, they are granted with surprising number of privileges like accessing sensitive data to acting on behalf of users. But these permissions aren’t static. Once an app is registered, its configuration can evolve over time through various operational changes. Admins may include additional permissions,…
6 min read
Identifying risky users in Microsoft Entra is more than just a security best practice. It’s a vital step in defending your organization against modern identity-based threats. Even in well-protected environments with strong security controls like MFA, attackers continue to exploit human behavior through techniques such as MFA fatigue, social engineering,…
6 min read
Failed sign-in attempts in Microsoft 365 are often overlooked, yet they serve as crucial indicators of potential security threats. Repeated login failures can hint unauthorized access attempts, compromised accounts, or misconfigurations putting sensitive data at risk. Ignoring these signs not only disrupts the security and productivity of your organization, but…
6 min read
Each organization registers applications in Microsoft Entra ID for various purposes, such as integrating third-party services, enabling Single Sign-On (SSO), or automating business processes. To ensure these applications function smoothly, they require credentials like client secrets or certificates, which are used to obtain access tokens and access organizational resources. These…
7 min read
Anonymous links give users an easy way to share files and folders in SharePoint Online with anyone. However, for admins, these links often create blind spots. They allow unauthenticated access and may remain active long after they’re no longer needed. Without regular reviews, they can quietly increase the risk of…
7 min read
Organizations with frequent staff changes face significant challenges when managing their user accounts. The constant cycle of onboarding and offboarding Microsoft 365 users requires attentive administration. In such environments, the ability to get Entra users gives admins a comprehensive view of users’ account status, license allocation, and more. This visibility…
7 min read
Managing distribution groups in Microsoft 365 often involves repetitive tasks, especially when you need to create a group with the same set of users and permissions. Copying distribution group members from one to another in Microsoft 365 might sound simple — until you’re stuck adding names one by one, double-checking…
4 min read
Many admins have reported that they couldn’t assign or remove licenses using the Microsoft Graph PowerShell cmdlet Set-MgUserLicense, encountering the error: Set-MgUserLicense : One or more parameters of the operation ‘assignLicense’ are missing from the request payload. I’ve received similar feedback from users in one of my PowerShell scripts: Microsoft…
2 min read
Shared and resource mailboxes in Microsoft 365 are designed for collaboration, not for direct sign-ins. However, if sign-in remains enabled, attackers could exploit these accounts to bypass security policies, send unauthorized emails, or access confidential data—posing a serious compliance and security risk. As an admin, you must properly secure these…
6 min read