Microsoft product
Mailbox full tickets do not need an Exchange Online Plan 2 upsell. Online archiving plus auto-expanding archive grows a mailbox to 1.5TB on licensing many tenants already own.
July 2024 ships the new Microsoft Entra Suite, auto-enables Microsoft-managed MFA Conditional Access policies, archives unlicensed OneDrive accounts after 90 days, and adds dynamic watermarking and scheduled Copilot prompts.
June 2024 brings token protection and the Entra PowerShell module to preview, hardware-backed device attestation and Config Refresh in Intune, expanded Copilot prerequisites, and a batch of Teams and Outlook updates.
Compromise is the opening move; persistence is the game. The MFA methods, device joins, app consents, and inbox rules attackers plant in Microsoft 365, with the CIS-mapped settings that block each.
App secrets and refresh tokens hardcoded in scripts are a breach waiting to happen. Two scripts to load Secure Application Model secrets into Azure Key Vault and pull them at runtime for headless automation.
Personal-device access does not have to be negotiated client by client. Define three BYOD support tiers once, then deploy the matching Conditional Access, MAM, and DLP stack everywhere.
Teams unbundles from Microsoft 365 worldwide, Exchange Online announces a 2,000 external recipient limit and the end of Basic auth SMTP, and Copilot reaches more SKUs. April 2024, by product.
The unified Planner app replaces Tasks in Teams, Azure Information Protection Plan 1 ends sale, Intune adds macOS setup and Autopilot controls, and Copilot reaches SharePoint, OneDrive, and mobile.
September 25 ends DAP for new customers, Conditional Access protected actions hit GA, Python lands in Excel, and the legacy Exchange Online client ID heads for retirement.
The new Outlook will replace Windows Mail and Calendar by end of 2024, Intune picks up driver update management and MAM for Edge on Windows, and Teams ships seven quality-of-life features.
Microsoft Build 2023 unveils Fabric and Windows Copilot, Teams rebuilds the channels experience, Yammer becomes Viva Engage, and a CSP audio conferencing promo quietly expires.
GDAP removes the pre-consent that made partner app registrations just work. Here is the full repair path: service account, app registration, GDAP roles, and the consent API, with scripts.
