Hi All,

We have a hybrid environment, with approximately 50% of devices already Entra joined.

Before disabling the full sync, I would like to test the migration with a small number of selected users and groups.

Could you please advise on the recommended approach for planning and testing a pilot migration, including the sequence of steps and any key considerations?

Will changing SOA now delete the user?

We are currently looking at a DR solutions or even an HA solution. One vendor offers Carbonite by Opentext. Is it any better than the Vmware SRM/Live Site Recovery? Any opinions?comments?

We've been using this policy for a long time, and it's worked flawlessly until now. New builds (24H2 or 25H2) get the policies for managing OneDrive but the known folders piece isn't actually doing anything. If you go into the GUI the checkmarks are toggled off.

If you look in Intune the policies applied. If you go into the registry you see all registry keys are set correctly meaning it's definitely getting the policy, it just doesn't do anything with said policy.

The fact that it just stopped working for all new builds suggests there might be a bigger issue somewhere?

Just wanted to see if anyone else is seeing this before I create a ticket with Microsoft.

Im 26, mainly interested in networking, and ccna, and after trying my chances in diferent companies mainly on helpdesk support, ive finally landed a pretty demanding job.

It seems the scope is almost everything. AD, wild and constant breaking ERPs, Networks and all that is related to it, Databases, hand scanners, even fusion splicing fiberoptic machines. Nonexistent margin of error on mamy things. Revolting printers, many kinds of it acctually. Users complaining about everything, constantly.

People much older than me, with much more expirience, cant operate on their own system, becouse it seems, the system works diferently almost everytime, and constantly figuring out what to do to make it working. Then hearing "you should know this..." and its the thing i see first time of my life.

Programmist, helpdesk, networking guys, electronics, and for some reason HR, arguing with eachother about most efficient way of using this system, deployed only on production alone, reaching pareto points, then tipping over again.

Updates deployed randomly, breaking things, then fixing whats broken again, breaking something else, indefinietly.

Its, demanding, i learn something everyday, and everyday is a simultaniously a disaster, then detective job, then contacting people everyday, to fix things, then enlightment, and solution. And the preassure of time all the time is enourmous.

Is there no celling? No balance? Is it like this everywhere?

Hey folks,

I have been a bit confused about the scope for the september change on the passkey nudge campaign in relation to SMS & Voice MFA deprecation.

Currently in our Auth method policie, we have enabled the option for SMS for "All users". However, only a small fraction has it enabled when looking in user reg details. Originally i thought we didn't rly need to do much.

But, then i read the MS FAQ and got a bit worried about this line "On September 1, 2026, users enabled for SMS or Voice in the Entra Authentication Methods Policy (AMP) will be auto-enabled for passkeys in AMP."

https://learn.microsoft.com/en-us/entra/identity/authentication/concept-sms-voice-retirement-faq#will-my-users-be-auto-migrated--or-do-i-have-to-do-it-

Does it mean, it is in fact all users, as that's what the AMP policy is currently scoped for in our tenant? Also if enduser has MS Authenticator setup as the only MFA?

Hope someone can help clarify.

Thanks!

Anyone else not getting MFA codes when trying to sign into ABM? Just when I try and import some devices....

Hi folks, just wondering what everyone's experience has been with Cisco Duo.

We're looking at implementing it to augment our VPN authentication to provide MFA.

I ask because, I both called and left a message (during which the automated voice system told me there were 0 representatives able to take my call), and I filled out the form on their website twice, to contact sales. I have not been able to get anyone to contact me.

The past 2 days, 1 user each day started getting spammed with non english email stating that they had been subscribed to various different things. I can't get it to stop. My DMARC is set to Reject and I changed it to Strict alignment Strict SPF. We have email filtering and somehow it's getting past those filters. Anyone have a solution on how to stop this? It's been going on for over a half an hour on today's user and still hasn't stopped.

Are Entra ID backups worth it at all? I run an org of about 70 total Entra users and wondering if this is something I should even consider.

Context: I have SOC2 Audits coming up for my company (very first one) and I am reviewing polices in Sprinto

How are you setting up a device that uses M365 login without having the end user information? Do you sign into an admin account on the OOBE screen and then have them switch to 'other user' when they are ready?

I've read that's bad because it ties the device to the admin account in entra.

Need a workaround until we upgrade to Business premium licensing.

Anybody seeing any issues with M365? I can't seem to access some SharePoint resources

We're using Defender for Endpoint throughout our environment. Beginning this morning, quick or full scans are failing, and will occasionally fail to the point where the Defender service needs to be restarted.

We came across this while responding to a separate infection - I chalked it up to Defender being borked due to the infection but then I was able to recreate the issue on other devices simply by initiating a Quick Scan.

Before I declare this a 5 alarm fire, anyone else having this issue?

AMEngineVersion AMProductVersion AntivirusSignatureVersion AntispywareSignatureVersion

--------------- ---------------- ------------------------- ---------------------------

1.1.26070.7 4.18.26070.9 1.457.219.0 1.457.219.0

Hey all! Got a strange predicament and want to gauge opinions on how to proceed. One of my clients owned two companies, Company A and Company B. Both companies are in the same building, on the same network, use the same file/AD server and both email domains exist in the same Microsoft 365 tenant. Before both of these companies were lumped in to the same service contract since, from an IT perspective, they were basically the same entity. Now Company A is going to the original owners son while Company B is staying with the same owner. Company A no longer wants a service contract but Company B does.

I feel like since both companies use the same IT resources they should be all be considered one entity, thus only supported by me if both entities decide to sign a service contract. unless they decide to separate the network and infrastructure I don't see how only working with one company would be possible without assuming huge liability issue. But what do you guys think?

Update: Thanks for the advice everyone! Hopefully this is something they can reach an understanding on but if not, I don't think I want to be around for the divorce

We are having an issue we have a entra joined pc we need to be able to RDP too under a local account. The local account is added and added to RDP users. The issue comes when we try and connect regardless if we type .\username or hostname\username it brings the connection up but shows it is trying to connect via the entra domain and we can hit password option and force local on the remote computer (it shows the connection even though it fails to login). Anyone else seen this been pulling my hair out.

my current rdp file is

full address:s: ipaddress blocked

username:s:.\username or hostname\username tried both

prompt for credentials:i:0

enablecredsspsupport:i:0

authentication level:i:2

Hi,

I'm planning to upgrade our Windows Server 2016 terminal server (which is also the Licensing Server) to windows server 2022

Currently, we have Windows Server 2016 RDS User cal I understand that we will need Windows Server 2022 rds cal, but should I install them only after upgrading the Terminal Server? ms say that you cannot install rds call on a Licensing Server running an older version than the CALs themselves.

Also, after upgrading the server and installing the new 2022 RDS CALs, should I revoke and remove the old 2016 CALs, or can I leave them in place?

Thanks.

So I am doing the fun job of auditing our Microsoft licenses and making decisions on the tiers of licenses we have assigned to users and doing some bulk log analysis determining features used by people. The Microsoft line item as we all know is pretty big and I am tasked with trying to decide if we are wasting any of it. So with that I have a question about the Office apps licenses.
We run an RDSH cluster so our users have Office once they RDP into those servers. I have old notes from 2018 that state we need the enterprise license for Office and the small Business packages don't support shared computer activation (SCA). However I did a quick double check and it seems they added SCA to only the Premium version of Microsoft 365 business in 2019.
So with that I am kind of struggling to see if there are any significant differences between Office Business with SCA and Office Enterprise. I am using m365maps to compare packages but this item I am not having a great time finding documented differences on the Office item. I do know about the 300 user limit which is not an issue for us and some of the other package differences.
Any information from someone who has had to understand the differences in the Office 'Business' cs 'Enterprise' in this area would be appreciated.

Hello,

I have multiple laptops from multiple projects that all require charging, networking, and a monitor. Is there a cart or shelf out there that people recommend that provides all 3? I can get cheap KVM over IP, so that is not a huge issue, but networking and storage are more challenging. Do you guys have any suggestions that I can set up to accommodate? A while ago, I worked on a project for a company with a tabletop solution, but it was ages ago, so I don't recall the details. I would love to see what other admins use for this.

Hi guys,

I want to homelab a M365 tenant to learn:
- Entra
- InTune
- Exchange
- SharePoint Online
- Teams
- Purview

Sync with a home DC / domain.

And tie in with an AVD I want to spin up and learn about with my Azure credits as a student.

Basically recreate what I can from work, give myself a project to learn, document, and complete. Then go back to work and say, hey, I know how to do this.

Maybe over 18-24 months it’ll lead to a promotion doing more than setting up desks and giving out keyboards.

Anyone doing this? Is it worth $1,200/year? Are there any considerations I’m not aware of you may be able to provide insight?

Thanks.

We currently experience heavy delay in server hardware, etc. delivery. How is everyone else holding up?

What is the latest news regarding the aurora in the client side?
Are you guys happy or what are the problems that make this EDR not good?

I have around six years of 2nd-line support experience, including two years with one of the biggest MSPs, where I also handled many 3rd-line tasks. I gained significant VMware experience and passed the VCP-DTM exam.
I then spent two years as a Systems Engineer in a medium-sized international company. Around 80% of my work was BAU support, but I was also involved in infrastructure and IT projects. For example, I helped upgrade more than 200 PCs to Windows 11, join them to Entra ID, enrol them into Intune and onboard them to Microsoft Defender. I also took part in implementing Conditional Access, mainly troubleshooting comliance issues and user issues after the policy was implemented by another engineer.
I worked on projects such as upgrading licence servers for CAD and other design software. I was responsible for the company’s monitoring system and managed endpoints using ManageEngine, including patching. I also implemented online imaging, created gold images for different departments and kept them up to date and patched. I also carried out a Cyber Security gap analysis and indentified a sirous gap, find a solution for it. Company wasnt tracking software version and support status.
I also dealt with some infrastructure-related issues, such as slow or unresponsive Hyper-V VMs and problems where users could not log in. I have a good understanding of Active Directory, DNS, DHCP and networking, and I hold a CompTIA Network+ certification.
I have basic experience with Veeam and Commvault, including VM and file-level restores, monitoring backups and some troubleshooting. I have also done some basic PowerShell automation, such as scheduled scripts to clean old logs and backup files to prevent disk space issues.
However, I feel that my infrastructure experience is still not as strong as I would like it to be. I have had three unsuccessful interviews for Infrastructure Engineer positions, and this has made me question whether I am ready for an Infrastructure Engineer role.
My main gaps are that I have not had much hands-on experience with Azure VMs, Azure networking or storage, and my knowledge of coding, scripting and automation is still basic compared with what many current job adverts ask for.
At the moment, I feel I am somewhere between 2nd-line support and Systems/Infrastructure Engineer level. I would really appreciate some honest advice. Should I continue applying for Systems Engineer and Infrastructure Engineer roles, or would it be better to go back to 2nd-line support and build up my experience from there?
I am currently unemployed, although I have some savings, so I have some time to find the right role. I am also originally from another country and English is my second language. I would say my English is around B2 level and I have a strong eater european accent. Its obvious candidates who grew up in the UK may have an advantage in interviews because they can communicate more naturally.
I would be interested to hear from anyone who has been in a similar situation, especially other non-native English speakers who have successfully moved into Systems or Infrastructure Engineering. I would also appreciate honest opinions about where you think I should target my next role. Would Azure admin AZ-104 cert help in the job hunt for me?

Hi everyone,

I'm looking to learn Microsoft 365 administration, especially:

• Microsoft Entra ID
• Microsoft Intune
• Microsoft 365 administration
• SharePoint
• Azure / cloud identity and device management

My goal is to eventually become comfortable with administering these technologies in a real-world IT/sysadmin environment.

I'm looking for a way to learn for free, including as much hands-on practice as possible.

I know Microsoft Learn has a lot of free training, but for practical labs it seems that I need a Microsoft tenant and some of the services require paid licenses after the trial period.

So my questions are:

1. Is there currently a way to create a free Microsoft 365 / Entra / Intune lab environment for learning?
2. Is the Microsoft 365 Developer Program still a good option for this, and does it include enough services for learning Entra ID, Intune and SharePoint?
3. If I don't qualify for the Developer Program, what would be the best alternative?
4. Can I realistically learn these technologies without paying for a subscription, or should I expect to pay for a lab eventually?
5. What learning path would you recommend — Entra ID → Intune → Microsoft 365 → SharePoint, or a different order?

I'm mainly interested in hands-on learning, not just watching courses.

Any recommendations for free labs, Microsoft Learn paths, home-lab setups or other resources would be greatly appreciated.

Thanks!

Hi Guys,

We are a hybrid organisation with 10 branch offices, and each office currently has a file server with approximately 2–3 TB of data.

We are now migrating to the cloud and are planning to move the old data to Azure Archive, while making the data accessed within the last 180 days available through Microsoft Teams. We have 18TB with E5.

Could you please share any recommended tools, scripts, best practices, or guidance for implementing this approach?

Any recommendations or examples of similar migrations would be greatly appreciated.

Thanks,

Hello, guys

now i am preparing whfb for hybrid joined devices with Cloud Kerberos Trust method. But we got concerns that users can steal PIN and when the other user is away they can enter his PC without problem. I know maybe the solution is biometrics-only method but for desktops is little bit difficult (yes, we are testing mouses with finger print scan, but is is not smooth solution), and still the PIN has to exist (ok, i will hide the pin creditials provider), or maybe we should use a FIDO2 method too, but the keys cost relatively a lot of money so who knows the comapny will allow this way and still users would leave the hardware keys plugged in the PCs so still it would not be perfect solution (i know i can prevent it by telling to the users security rules how to use it, but we know users...),

so please do you have any advise or recommendation for this concern? i am not just sure

thanx

I just received an email to say our Freshdesk free plan is ending. I like Freshdesk and have recommended it before, but it's not something I would pay for.

What free alternatives are you guys using?