Outlook Reactions Will Work in Outlook Classic A fix due in May 2026 will make sure that the Outlook classic client will handle Outlook reactions properly if the reactions are blocked by a transport rule.

You might have missed the fact that #Outlook classic doesn't handle reactions to email properly when an organization disables the feature. Well, a fix coming in May will solve the problem. If you care about it, that is...
office365itpros.com/2026/04/17/o...
#Microsoft365

DLP Policy for Copilot Can Block Web Searches A new action for the DLP Policy for Copilot allows DLP to block Copilot from performing (Bing) web searches if a prompt contains sensitive information types.

#Microsoft365 DLP has a new action to stop Copilot sending information to Bing to process web searches when grounding user prompts. Allied to the existing block on processing sensitive information types in prompts, this is a good update. More at office365itpros.com/2026/04/16/d...

Create a Weekly Incomplete Task Report for Planner A reader wanted a weekly incomplete task report to send details of Planner tasks to people with outstanding work to do. We used PowerShell to create the email.

Want a weekly reminder email from Planner outlining your incomplete tasks? Here's how to create and send the email with #PowerShell using the Microsoft Graph PowerShell SDK to nag people to get their tasks done...
office365itpros.com/2026/04/15/w...
#Microsoft365

Use the Copilot Retrieval API to Run Microsoft 365 Searches The Copilot Retrieval API is a Microsoft Graph API that apps can use to search Microsoft 365 locations to find information to ground user prompts.

#Microsoft365 #Copilot has some Graph APIs that can be used with #PowerShell. Here's how to use the retrieval API to fetch results generated by Copilot. You might never use this API, but it's an interesting insight into how Copilot works: office365itpros.com/2026/04/14/c...

Eventually Consistent Entra ID and Good PowerShell Code Entra ID uses an eventually consistent multi-region database architecture. PowerShell code that fetches and updates Entra ID objects needs to do it right.

#EntraID is a 'eventually consistent' database. Microsoft gave some tips for interacting with Entra ID. Here are the tips with #PowerShell examples to help improve scripts: office365itpros.com/2026/04/13/e...

User and Group Assignments to Secure Entra ID Apps User and group assignments can be added to Enra ID apps. Once added, only assigned users can access an application.

When deploying #EntraID applications inside your #Microsoft365 tenant, consider using user or group assignments to limit access to the apps to avoid the potential for unauthorized use of an app. More here: office365itpros.com/2026/04/10/u...

#Microsoft365 #Copilot diagnostic logs are available to tenant administrators in clear text. Every prompt and every response with no auditing of access. Seems like a pretty blatant violation of user privacy. More information here: office365itpros.com/2026/04/09/c...

Using the Microsoft 365 Connector for Claude The Microsoft 365 Connector for Claude allows Claude to access SharePoint and OneDrive files, emails, and Teams chats and meetings.

Anthrophic now allows any Claude user (even the free plan) to use its #Microsoft365 connector (an MCP client-server setup) to access #Microsoft365 content (Exchange, SharePoint, OneDrive, Teams). Here's how it works: office365itpros.com/2026/04/08/m...

Flex Routing Dilemma for European Copilot Customers Microsoft plans to introduce flex routing to handle situations when demand exceeds capacity for Copilot processing in Europe. This could be an issue for tenants

Microsoft plans to introduce "flux routing" to offload high demand for Copilot LLM processing to datacenters outside the European Uniom/EFTA from April 17. Sending data for processing elsewhere might vex some European #Microsoft365 customers...
office365itpros.com/2026/04/07/f...

How to Create a Microsoft 365 Groups Change Report An old script tracked changes to Office 365 Groups. The techniques from 2016 wouldn't be used today, as we show in a Microsoft 365 Groups Change Report script.

A reader complained that an old #PowerShell script from 2016 no longer worked. Many changes conspired to condemn the old code, which tracked changes to #Microsoft365 Groups in a tenant. New techniques were used to "fix" (aka rewrite) the code.
office365itpros.com/2026/04/06/m...

Container Management Labels for Viva Engage Communities Viva Engage communities now support Purview container management labels (sensitivity labels that manage settings for groups, teams, communities, etc.).

It's taken a while (too long), but Viva Engage (Yammer) communities now support sensitivity labels for container management. These labels help to ensure consistent management across a #Microsoft365 tenant. More here: office365itpros.com/2026/04/03/c...

Restricted Site Creation Control for Apps This article discusses the use of restricted site creation for apps. The feature has an allow or deny list to identify apps that can create new sites.

Should #EntraID apps be allowed to create #SharePoint Online sites? If you want to control this activity, there's a new policy to stop 3rd party (including tenant) apps creating new sites. Here's the detail: office365itpros.com/2026/04/02/r...
#Microsoft365

Office 365 for IT Pros April 2026 Update (#130) Fresh from celebrating the 30th anniversary of Exchange Server, the Office 365 for IT Pros team is happy to release the 130th monthly update for the book.

We've released the April 2026 update (monthly update #130) for the Office 365 for IT Pros eBook. The Automating #Microsoft365 with #PowerShell eBook (included in the bundle) is also updated. Subscribers, please download!
office365itpros.com/2026/04/01/o...

How to Report Entra ID Group Insights Entra ID Group Insights are a new preview feature in the Entra admin center. The lack of documentation is challenging, but it's easy to understand the output

#EntraID group insights give #Microsoft365 tenant admins some hints about improving their groups. Most of the hints are easily recreated using #PowerShell. Here's how to read the insights data and add to it to create better information: office365itpros.com/2026/03/31/e...

Use Conditional Access Policies to Block Weekend Access Conditional access policies are very powerful. A beta feature appears to support time-limited blocks, but maybe that's not needed because it can be done now.

A beta (but undocumented) condition for #EntraID CA policies apparently supports time-restricted access. Even without the feature, CA policies remain the best way to limit user access to #Microsoft365.
office365itpros.com/2026/03/30/c...

The Retirement of SharePoint Alerts is a Pain in the Rear I've used a SharePoint alert to create an emailed daily digest of changes made to files in a document library for seven years. Now alerts are going away.

In a Friday musing, I contemplate why the retirement of #SharePoint alerts is a royal pain in the rear end for people who want to track changes made to documents...

office365itpros.com/2026/03/27/s...
#Microsoft365

Microsoft Limits App Access to Sensitive Message Properties Microsoft has announced details of a change to app permissions to restrict updates to sensitive message properties (like recipients) without an advanced perm.

Microsoft will limit application access to sensitive properties for non-draft messages after December 31. New permissions are available to grant access, if an app really needs to mess with recipients, message content, or similar: office365itpros.com/2026/03/26/s...
#Microsoft365

Microsoft Defender Revelation Poses Troubling Questions Microsoft disclosed that Entra ID login events were missing from Microsoft Defender for Cloud Applications for nine months — and waited more than three months after the fix to tell customers. Here's w...

For months, the Microsoft Defender for Cloud Apps solution was deprived of important #EntraID data due to a bug. All explained by Paul Robichaux here.
office365itpros.com/2026/03/25/d...
#Microsoft365

Well, the apps can certainly access a lot of data, but they don’t read organizational data like reporting relationships that are stored in Entra ID. That’s just one example of data that Copilot consumes. And ChatGPT cannot access protected content either.

ChatGPT Enterprise Apps Grab Some Work IQ ChatGPT Enterprise apps can access SharePoint Online files, Exchange Online email and calendar, and Teams chats, messages, and tasks.

If #Microsoft365 tenants install the #ChatGPT enterprise apps, the apps can access a lot of the "Work IQ" that Microsoft believes is the secret sauce for its #Copilot product. But do the apps deliver the same as Copilot? No... Here's why: office365itpros.com/2026/03/24/c...

Entra ID Backup and Recovery Has a Low-Key Preview Microsoft released the preview of the Entra ID Backup and Recovery solution to tenants on 19 March 2026. No real details are available yet from Microsoft.

The debut of the preview of #EntraID Backup and Recovery was curiously low-key with the announcement buried in a blog post about the RSA conference. But the software's available in tenants and it works. Here are the details: office365itpros.com/2026/03/23/e...
#Microsoft365

Automating Microsoft 365 with PowerShell Update #22 The April 2026 update (#22) for the Automating Microsoft 365 with PowerShell eBook is available for subscribers to download (EPUB and PDF files).

Monthly update #22 for the Automating #Microsoft365 with #PowerShell eBook is available. Also, Microsoft has released V2.36.1 of the Graph PowerShell SDK - the .1 update was needed because they forgot to include the new UTCM module in V2.36:
office365itpros.com/2026/03/20/a...

Planner Agent Delivers AI Help for Tasks The Planner agent is now available to users with Microsoft 365 Copilot licenses and any Planner license. The agent helps people understand how to do a task.

In more #Microsoft365 AI news, the Planner agent is now available to everyone with a Planner SKU if they also have a #Copilot license. The idea is that the agent helps you understand what to do to accomplish a task. Here's what I found out: office365itpros.com/2026/03/19/p...

Sad State of Microsoft Graph And Other Microsoft 365 APIs Some Microsoft MVPs have expressed a strong opinion that Microsoft isn't doing enough to develop and enhance the Microsoft Graph APIs across Microsoft 365.

Some Microsoft MVPs have questioned the gaps appearing in Graph API coverage and a lack of consistency and robustness in some APIs. It seems like Microsoft is not dedicating enough resources to this topic. Thoughts?
office365itpros.com/2026/03/18/m...
#Microsoft365

Is the New Agent 365 Worth $99? - Office 365 for IT Pros Microsoft 365 E7 bundles Microsoft 365 E5, Microsoft 365 Copilot, the Entra Suite, and the new Agent 365 into a $99/user/month SKU. The big question is whether investing in Microsoft 365 E7 licenses m...

Is the New Agent 365 Worth $99?

Microsoft 365 E7 bundles Microsoft 365 E5, Microsoft 365 Copilot, the Entra Suite, and the new Agent 365 into a $99/user/month SKU. The big question is whether investing in Microsoft 365 E7 licenses make sense for tenants?

office365itpros.com/2026/03/17/i...

Third-Party Recording Bots Blocked by Teams Meetings Teams will soon block third-party recording bots from being able to generate transcripts and summaries for Teams meetings.

#MicrosoftTeams will soon block 3rd party AI-powered transcription apps from Teams meetings. Compliance is the big issue around these apps, but some will think the block exists to protect #Microsoft365 Copilot.
office365itpros.com/2026/03/16/t...

You might be surprised to know that #Copilot in #MicrosoftTeams allows meeting participants to seek opinions about other meeting participants based on their interactions. This won't happen soon when a change kicks in:office365itpros.com/2026/03/13/sentiment-rel...
#Microsoft365

Probably found an account that wasn't protected with MFA and used a password spray to compromise its credentials... that's the normal way in.

Practical Graph: Creating a Service Principal Analysis for a Microsoft 365 Tenant Understanding the set of registered and enterprise apps active in a MIcrosoft 365 tenant is important. Attackers can sneak in and plant an app ro exfiltrate or otherwise steal data. This article expla...

Have you conducted a full audit of all the apps in your tenant? practical365.com/service-prin...

And to answer the question, a privileged account or app can do what the permission grants. You can't limit an account or app to being able to process a certain number of objects per day. But you can monitor audit logs (using automated processes) to pick up the signs that something might be bad.