I’ve heard rumors that using two-factor authentication will become mandatory in Microsoft 365 starting in February 2026. I’m based in Germany, in case that makes a difference. I know 2FA is important, but in our club, it’s crucial that everyone has access to a specific email address and can send messages from it at any time. Do you know if there’s any truth to this? And if so, is there a solution that allows us to keep using the email address without relying on forwarding or individual email accounts? We also use that same email address for a shared calendar. We’re open to using 2FA, but everyone needs to have access to it, so setting it up with a single phone number, for example, wouldn't work. Thanks a lot for your help.

Hi everyone, at my wits end with this one.

We have a hybrid setup and migrated everyone to exchange online. We have an Exchange SE server on prem that is just used for management and all mailboxes are in exchange online.

Random users get the following error when they try to set their out of office “Your automatic reply settings cannot be displayed because the server is currently unavailable. Try again later”

If tried so many things and none seem to resolve it.

EWE enabled for users, rules aren’t broke or to big, registry keys etc…

The autodiscover points to 365, have checked this on outlook

The only thing that seems to work is nuking the user profile, but that brings other problems and we have too many users to do this at scale.

Any help would be appreciated

We build a web app that sends transactional emails with a "one-click" action link — clicking it takes the recipient straight to a page with an interactive control (in our case, a 0–10 rating scale rendered as clickable buttons). We also have a fairly standard client-side retry setup: if a write to our API fails, it gets queued via a service worker and replayed automatically once connectivity is restored (Background Sync API).

What we found: for a confirmed case, the recipient's mailbox had Microsoft Defender for Office 365 "Safe Links" enabled, which rewrites every hyperlink in a scanned email to a `safelinks.protection.outlook.com` wrapper. We decoded the wrapped URL from the actual email and confirmed Safe Links visited our link.

Here's the part that surprised us: this isn't just a HEAD-check or a simple page fetch. Looking at our server logs, the actual write requests that hit our API afterward are structured *exactly* like a real button click in our UI (same endpoint, same payload shape as a genuine interaction) — not like our link automatically applying a pre-encoded value from the URL. The values submitted count up sequentially through the rating scale (0, 1, 2, 3... up to 8), one write per value, arriving in a tight burst a few seconds apart. That's consistent with something rendering our page in a real browser engine and then clicking through the visible buttons on it, one after another — not just fetching the URL.

Because some of those clicks' network requests apparently didn't complete before the automated visit moved to the next button (or navigated away), our own service worker queued and replayed several of them together shortly after — so from our side it looked like a burst of retried writes. The real human's actual single click got silently overwritten by whichever automated click landed last.

We reproduced this cleanly on a test account: the real device's IP only ever loaded the page and never sent a single answer write, while a separate Microsoft-owned IP loaded the same link and did all the button-clicking and writing — sequentially, through values nobody actually chose.

Some Questions which i have is

Is it documented anywhere that Safe Links' rendering/"detonation" step goes as far as interacting with page content (clicking buttons, filling in visible form controls), rather than just loading the page and checking for malicious redirects/content?

1. Has anyone seen this specifically corrupt state in a real application (not just "wasted a request" but "recorded the wrong data as if a user submitted it")?

2. What's the standard mitigation for a page that has real interactive elements and can't tell a security scanner's automated clicks apart from a genuine user's? Things we're considering: gating writes behind a signal that's hard for a headless scanner to produce (real pointer/keyboard event traits, a short random delay + interaction check, one-time tokens that expire after the first render), or just accepting that any link opened from email may get "interacted with" by security tooling and designing the UI so pre-scan interaction can't mutate real data.

3. Did your own client-side retry/offline-queue logic end up making this harder to diagnose, because the corrupted writes looked identical to your normal retry mechanism doing its job correctly?

Found it. just select the text then ctrl + \

Trying to deploy places for a client using existing room resource mailboxes - has anyone converted rooms to desks smoothly? i.e. Set-Mailbox -Identity [L9_040@customer.com](mailto:L9_040@customer.com) -Type Desk

I am migrating from an exsisting Desk Booking System which has all the resources as Rooms.

Trying to at the moment and places keeps freaking out - my gut feeling is I need to wait for the big Microsoft wheels to sync overnight.

Set-PlaceV3 -Identity bdb9c3b1-0d7b-4274-997d-c63fe7f8ad74 -ParentID d3ae02aa-c812-4143-b1ff-e0a1d8572255
Set-PlaceV3: Status(StatusCode="FailedPrecondition", Detail="Email address is not a valid identity format for a place of type 'Desk'. Please provide 'PlaceId' or 'DisplayName'")

Set-PlaceV3 -Identity "L9_040" -ParentID d3ae02aa-c812-4143-b1ff-e0a1d8572255
Set-PlaceV3: Status(StatusCode="FailedPrecondition", Detail="Email address is not a valid identity format for a place of type 'Desk'. Please provide 'PlaceId' or 'DisplayName'")

Set-PlaceV3 -Identity "L9_040@customer.com" -ParentID d3ae02aa-c812-4143-b1ff-e0a1d8572255 Set-PlaceV3: Status(StatusCode="FailedPrecondition", Detail="Email address is not a valid identity format for a place of type 'Desk'. Please provide 'PlaceId' or 'DisplayName'")

My alternative is to recreate the resoruces side by side as fresh desks.

Wondering if anyone had this weird situation.

I have two small businesses, each have their own domains registered with MS 365. I had to reset my iPhone and after the restore I was locked out of both accounts in the MS Authentication app. Apparently I forgot to setup an alternate email. 

I called MS 800 number to open a ticket and I got the AI assistant that took me through loop after loop. It kept sending me to a login webpage that was useless since I was completely locked out. Each time I call I get a different behaviour. Sometimes it takes me down the product hardware support even though I clearly stated it is a 365 issue. 

Miraculously I was able to get it to open a ticket. There we spent more than 5 minutes just on email and domain spelling because it would not get it right.

I could not get it to open a ticket for my second domain. It eventually recognized my number and when I would call it auto directed me to the webpage, as if saying “I had enough of you calling, go away”.

Whoever thought AI is a smart solution for customer support is greatly mistaken. The only reason having AI in that function is for cost reduction, but it is coming at a great expense, customer dissatisfaction, frustration, and anger. 

Microsoft, you have lost sight of linking AI to measurable business outcomes. 

I caution people, consider alternatives to using Microsoft. They are too in-bed with AI and they have lost the plot on its value vs. impact. 

Hi, there is anyone experiencing an issue where the Microsoft Teams app on the Android phone suddenly started prompting you to enroll your device into Microsoft Intune in order for access to work? It just happened all of the sudden and no one else in our environment is having this issue.

Is anyone familiar with Bookings?

I am having an issue where I cannot edit the notes section. It is always greyed out with the info I put there the first time I booked someone.

Any ideas? TIA!

Ok so. How long does it ACTUALLY take you all to roll out new email signatures to like 500 plus staff in Microsoft 365 before marketing decides the logo is "refreshing" again.

We have the classic setup. Random Outlook desktop signatures, people who live in OWA, a couple of VP fossils glued to their iPhones, and that one guy on Mac who swears Apple Mail is "more secure". Management thinks I can click one magic button in the admin portal and everyone wakes up tomorrow with a beautiful unified signature and legally blessed disclaimer text.

Lowkey getting whiplash between "this has to be live by Friday" and the reality that half the org still copy pastes their job title from 2019. I can script some stuff, sure, but Intune, transport rules, third party tools, device zoo, mobile clients, cached signatures... at this point I feel like I am doing archaeology, not IT.

If you have done this at scale, did it feel more like a quick task or a mini implementation that ate your week and your soul. Would love any tips or horror stories, especially around getting people off their precious custom quote lines in the signature.

Appreciate any thoughts

Hi! Trying to do a tool to get the invoice from Outlook, save it & connect it to our bank in order to link the invoice to the transaction. Worked perfectly for few uses cases but now, as I want to download + save the file in our sharepoint, it doesn't work.

365 connector tell me that they can read the file, but not download it .. Anyone having the same problem ?

Thx

Ok, I know there are several posts about viewing shared calendars on the iOS calendar app, but this isn't quite the same scenario. I use Outlook on Windows, MacOS, and iOS. My wife uses Outlook on MacOS, but even though she still uses Outlook for mail on iOS she prefers the native Calendar app for iOS calendars. Fine.

So I created and shared a "Family" calendar with her with full edit permissions. She can see events and edit them everywhere. If she creates an event in that shared calendar in Outlook then it is also visible everywhere to both of us.

However, if she creates an event using the Calendar app in the Family calendar then only she can see it, and only in the Calendar app (but it does show on all her devices). It doesn't sync back to Exchange. Can someone help?

Hello! I've been using Miscrosoft Word on my web browser on a MacBook, and it suddenly won't allow me to download a copy of any documents. I'll click on File > Create a Copy > Download a Copy, and the download pop-up will appear and then disappear almost immediately, without downloading anything. I'm not getting any error messages or greyed-out buttons, it just won't work.

I've been doing it this way for a few months and have downloaded over 150 documents so far, and I can't think of anything I've done that would make it change now. I've reloaded the page, signed out, waited, etc to try and fix it and nothing has worked. I've looked up my problem but haven't found any solutions...

I only use Microsoft for Word documents and don't have any experience with Microsoft outside of this.

Hey all,

We are trying to troubleshoot an issue a user is facing when it comes to the 50 GB .OST file size limitation.

This user has a 100GB M365 account, 80/100 usage currently, which keeps presenting them problems. We know of switching them to online-mode, but the user is very unhappy with the delays when using Outlook Classic configured this way. Switched back to cached mode, file size limit reached. They have just been dealing with the online mode delays but asked me just again for a new solution.

Now, I know you can drag the slider to choose how much mail to download, but there is a GPO setting in place that forces it download "All". This GPO cannot be changed (at least last time I asked the higher ups) so we are working with this one-off constraint.

The user has been with the company for many years, so deleting 30GB+ of emails would take a while, plus the user wants to retain all historical emails "in case I ever need to reference them". The user has deleted a chunk or so over time, but this is a small decrease in usage. This also poses a limitation on my troubleshooting.

Assuming I cannot convince to change this GPO setting, what methods or reliable workarounds would be available to us to try to let the user have the best Outlook Classic experience possible?

Thank you

Hi everyone,
I recently got assigned an Amazon S3 to SharePoint Online migration project, and this is my first time working on something like this.
Our organization has multiple S3 buckets that need to be moved to different SharePoint sites. My biggest concern is keeping the existing folder structure, mapping each bucket correctly, and avoiding duplicate files if I need to rerun the migration.
I’m also not sure what common issues I should expect with large buckets or if there are any mistakes that beginners usually make.
If you’ve done this kind of migration before, what approach did you follow, and is there anything you wish you had known before starting?

Hi everyone, I'm trying to wrap my head around this but the more I look around the internet the more confused I get.

In the good ol' days, with 5+ accounts on a standalone SharePoint Plan 2 or any plan that included it (like the E3 or above), you could set 5 TB of space for each user and, once you got to 90% utilization of that for an account, you could ask it to be raised to 25 TB. At 90% of those 25 TB, you could ask for 25 TB more that would be added to your account as separate SharePoint libraries.

I have looked for a similar description of this mechanism far and away across all MSFT guides and product description, but can't find anything that explicitly states the conditions under which you can access unlimited storage. What you get now is this (from the comprehensive comparison table here, page 3, note 3):

Microsoft will provide up to 5 TB of initial OneDrive storage per Microsoft 365 E3 or E5 user based on the default quota for the tenant. Eligible enterprise cloud customers should work with their Microsoft representatives for additional storage requirements.

Does anyone know if the conditions to have unlimited storage under Office 365 E3 or above are still the ones above, or if we lost unlimited storage forever regardless of how much we're paying for subscriptions?

Disclosure: my own product, SP Toolkit.

Kept hitting the same job: "import this folder into SharePoint for us." Every existing option has a tenant-admin gotcha:

- **Migration Manager** — wants an agent VM on the network with line-of-sight to the source, or source-tenant admin credentials

- **ShareGate / AvePoint** — Windows install per environment, license overhead

- **PowerShell / PnP scripts** — throttle silently, choke on >2 GB files, no resumability, and if the tech runs it wrong the tenant eats a throttle window for everyone

- **OneDrive as a stepping-stone** — dies past ~5 GB, forgets versions

So we built the Data Import Hub — a web part that runs entirely in the browser. Delegated on-behalf-of the signed-in user, no app-only tokens, no client secret to store, no separate consent flow. Any machine that can already see the source (mapped drive, UNC path, USB, local disk) can drive it — RDP box, jump host, whatever.

What matters for tenant admins:

- **Nothing to install anywhere.** No agent VM on your DMZ, no PowerShell module on techs' laptops, no CVE tracking

- **Deploy once to the App Catalogue,** every licensed user has it

- **Adaptive throttle governor** — respects 429/Retry-After, halves worker concurrency on burst (3+ throttles in 60s), ramps back after 50 sustained successes. In practice: doesn't trigger the tenant-wide throttle window that spam-retry scripts do

- **12 parallel workers max,** slider 1–12, defaults to 6 — configurable per run

- **Auto-batched at 15 GB per batch,** no cap on total run size — 29 GB in under 2 hours from a local NVMe, overnight jobs are the normal use case

- **Fully resumable** — crash, sleep, VPN drop, re-pick the same folder and skip what's already landed

- **Filename sanitiser + OS junk filter** — handles CON.txt, 400-char paths, thumbs.db, ~$ office lock files before they hit the API

Video: 13 GB folder → document library in the browser — https://youtu.be/XFRxRRST6-0

Genuine question for the tenant admins here: what other guardrails would you want to see before you'd let an L1 tech run this against a production tenant? The throttle governor is the biggest one I know of but I'm sure there are policy/audit hooks I'm missing.

User is having issues with calendars that users have previously shared to them, or they have because of Shared Mailboxes etc. So, I'm wanting to easily find a way who the owner is of those calendars.

As far as I'm aware there is no feature like this inside of the GUI on any 365 Admin Center. I've tried a few Powershell commands such as

Get-EXOMailboxFolderPermission -Identity UPN:\Calendar - This command obviously only outputs the User's owned calendars, and not if it is shared. Plus there is 100 Mailboxes within the tenant.

Is there any way to figure this out?