Microsoft 365

Refresh gMSA permissions for Entra Cloud Sync Members

Problem If you add or remove Active Directory permissions on the gMSA account used by Microsoft Entra Cloud Sync provAgentgMSA ,the agent may not pick up the changes immediately. This can affect any scenario where the provisioning agent uses this gMSA account to access Active Directory, such as: * Microsoft Entra

Bastien Perez
Bastien Perez
Microsoft 365

Microsoft Entra: scheduled end of life for SMS and voice call MFA - the full preparation guide (updated August 28, 2026) Members

💡Need help preparing this migration? Get in touch through the contact form at https://itpro-tips.com/contact/ or on LinkedIn at https://www.linkedin.com/in/perez-bastien/ Microsoft has announced through Message Center notification MC1426371 that SMS and phone calls will no longer be supported as built-in

Bastien Perez
Bastien Perez
Microsoft 365

Microsoft Entra : fin de vie programmée du MFA par SMS et appel vocal - guide de préparation (mis à jour le 28 août 2026) Members

💡Besoin d'aide pour préparer cette migration ? Contactez-moi via le formulaire de contact https://itpro-tips.com/contact/ ou sur LinkedIn https://www.linkedin.com/in/perez-bastien/ Microsoft a annoncé via le Message Center MC1426371 que les SMS et les appels téléphoniques ne seront plus pris en

Bastien Perez
Bastien Perez
Microsoft 365

Get-ADSyncAADCompanyFeature requires AADUserName after an Entra Connect upgrade Members

After migrating Microsoft Entra Connect to a newer version, some PowerShell cmdlets may change behavior before the official documentation fully catches up. This is the case with Get-ADSyncAADCompanyFeature in Microsoft Entra Connect Sync 2.6.84.0. Symptom On an older Entra Connect Sync server running version 2.6.

Bastien Perez
Bastien Perez
Microsoft 365

Microsoft Defender for Office 365 Plan 1 comes to Microsoft 365 E3 and Office 365 : What Changes Members

Microsoft is adding Defender for Office 365 Plan 1 to Microsoft 365 E3 and Office 365 E3 subscriptions. The rollout started on June 17, 2026, and should be completed by autumn 2026. This is a significant security improvement for E3 tenants. However, two details require attention: * Protection is enabled automatically

Bastien Perez
Bastien Perez
Microsoft 365

OWA error "OwaUserHasNoMailboxAndNoLicenseAssignedException" when opening a mailbox Members

When an unlicensed account with no mailbox tries to access another user’s mailbox or a shared mailbox, OWA returns a 500 error: OwaUserHasNoMailboxAndNoLicenseAssignedException or UserHasNoMailboxAndNoLicenseAssignedError. Let's look at why it happens and how to get straight into the mailbox. The error If you inspect the OWA startup

Bastien Perez
Bastien Perez
Microsoft 365

OneDrive moves to the cloud.microsoft domain: what actually changes (and what does not) Members

Microsoft is moving the OneDrive web experience from the familiar contoso-my.sharepoint.com address to a new unified domain: onedrive.cloud.microsoft. It is announced in the Microsoft 365 message center under MC1392563 (link), and it is part of the broader cloud.microsoft domain unification that Microsoft started back

Bastien Perez
Bastien Perez
Microsoft 365

Intune enrollment CNAME records: do you really need them? Members

A recurring question when you set up Windows device management with Microsoft Intune: "Do I really have to create the EnterpriseEnrollment / EnterpriseRegistration CNAME records?" The short answer is no. They are optional, and if you rely on automatic enrollment they bring you nothing. Let's clear this

Bastien Perez
Bastien Perez
Intune

Soft delete for Entra devices (preview) Members

Good news for Microsoft 365 admins: deleting a device in Microsoft Entra ID is no longer necessarily permanent. Microsoft has introduced soft delete for device objects in Entra ID (currently in preview), and it works much like the soft delete you already know for users and groups. Instead of being

Bastien Perez
Bastien Perez
Identity

SCIM Radar: a dashboard for your Entra ID provisioning logs Members

Entra ID's provisioning logs are the source of truth when a SCIM job decides to skip a user, errors out on a specific attribute, or queues retries. In practice, the portal UI shows one application at a time, paginates aggressively, and does not aggregate across applications. The JSON

Bastien Perez
Bastien Perez
Microsoft 365

Exchange RBAC Manager: a GUI to explore and manage Exchange Online RBAC Members

Exchange Online RBAC is powerful, but day to day it still boils down to chaining Get-RoleGroup, Get-ManagementRoleAssignment, Get-ManagementScope and friends by hand to figure out who has what, why, and through which path - then carefully crafting a New- or Set- cmdlet when you need to change something.

Bastien Perez
Bastien Perez
Microsoft 365

Microsoft Entra Backup and Recovery Preview: What you need to know Members

All All properties Partial Object type Scope Properties / notes

Bastien Perez
Bastien Perez
Microsoft 365