Forum Widgets
Latest Discussions
DLP Alert Received, but no report.
Hi, I have received the following alert, but I am unable to locate the report in Compliance Centre. Can anyone give me guidance on where to look specifically? I only have default policies applied, but would like to look into this alert in more detail to understand what is happening and check it's legitimate. Many thanks, Pete A match of one or more of your organization’s policy rules has been detected. Report Id: xxxxxxx-0906-4c2e-887b-85cd0e68e117 Person who last modified document: Severity: High False positive: No Override: No Condition matched: External recipients Condition matched: Contains sensitive information
Microsoft 365 Apps Admin Center - Inventory Error
We're running into issues trying to access Inventory in the 365 Apps Admin Center (https://config.office.com/). When trying to swap a specific group of devices to a different update channel (Current to Monthly Enterprise), we go into the Apps Admin Center, select inventory and receive a generic error: There was a problem showing the security update status information. Please refresh the page or try again later. 00000000-0000-0000-0000-000000000000 This has been happening for 3 days now. Was working fine prior to that (and were able to flip a few devices earlier in the week). Anyone else experiencing the same/similar issues? Multiple 365 Admin's within our organization are getting the same error, so it's not isolated to 1 person/1 account.
Obtain Deleted Stats (SharePoint) by Retention Policy
I've scoured: Identify the available PowerShell cmdlets for retention | Microsoft Learn and the Unified Audit Log (Using Search-UnifiedAuditLog in Powershell: All You Need To Know, How to Query Microsoft 365 Audit Logs using PowerShell – TheITBros) to see if I can come up with a method to obtain some statistics regarding how many files and space (storage) has been freed up with the use of retention policies being enabled. I'm drawing a blank. In an ideal world, I'd like know how many files have been deleted by the system (the system enforcing a 5 Year from last modified Date and Delete Policy) for the last year or 6 month intervals. If possible the corresponding volume of storage space recovered from these deletions. Any ideas?
Security Admin Center Tenant Allow/Block List Not Able to Block IPv4?
While using the Security Admin Center Tenant Allow/Block List we have been able to block specific email addresses and IPv6 IP addresses but are unable to block IPv4 IP addresses. We have tried both using the console and the CLI but have turned up unsuccessful both times when it comes to IPv4. A large majority of the phishing attempts that we encounter come from IPv4 addresses but we have been unable to block any of these. Will there ever be functionality for IPv4 within the Tenant Allow/Block list or is the only option to use conditional access policies? Also why is this enterprise tool only functional with IPv6 and without documentation stating that it does not work for IPv4?
Unable to find the security alert in M365 Defender referenced in an email alert.
This happens a lot. I get these emails from Office365Alerts notifying our team that "A medium-severity alert has been triggered". At the bottom of the email is a link to "View alert details". When I click that, the site shows an error: "Can't find it. Either what you are looking for doesn't exist or you need to use a different search string." So, then I go to the Alerts view and filter to show everything (at least I think I am) but there's nothing related to this particular alert (unusual volume of file sharing). Where did it go? EDIT: Including a screenshot of another email I got today. The result of clicking the 'View alert details' is again the same.Login problems, continuously getting the same message
Every time i login on an app i get the same message: "More information required" "Your organization needs more information to keep you account secure". Then i have the options to Use a different account or Learn more. I can just press Next and the message goes away. After that i get another message: "Keep your account secure" "Your organization requires you to set up the following methods of proving who you are." Below that, there is a message: "Success!" "Great job! You have successfully set up your security info. Choose "Done" to continu signing in". "Default sign-in method:" When i press done, the message goes away. But i keep getting the 2 messages every time i change an app or even a menu option. So to be clear, this happens every time i switch apps. I.e. from Exchange to Azure, to Outlook. When i press "Next" and "Done" i get access to the app. But this is really annoying. What am i doing wrong? I'm the admin of a small company, and i cannot figure out what setting i changed or need to change. The property "Enable Security Defaults" is already set to no.Creating an Office 365 User no longer lets you send email with password to User
Is this a new update? Before, on this page, when I wanted to create an Office365 User account, I had the option at the bottom where I could input an email so the User would receive the password for his first login, but the option no longer appears...
