u/Unlikely_Tie1172

A lawyer asked if it is possible to take a snapshot of Teams memberships (people who were members at a certain point). This isn’t something that every Microsoft 365 tenant will want to do, but good reasons no doubt exist for the request. In any case, PowerShell makes it easy to find the team membership data and record it in a CSV file or XLS spreadsheet.

https://office365itpros.com/2026/07/03/teams-membership-snapshot/

The Graph removeAllAccessForUser API is supposed to remove external chat messages from the view of a tenant user when the chat contains some objectionable material. Unless the documentation is erroneous, the API doesn’t work as advertised and the results are disappointing. All of which means that blocking content for external chats isn’t really possible. If someone gets to start an external chat, they can pump some horrible stuff into your tenant.

https://office365itpros.com/2026/07/02/external-chat-api/

We've just published the Microsoft 365 for IT Pros (2027 edition) eBook. Or rather, an eBook bundle because it includes four books:

• Microsoft 365 for IT Pros (Entra ID, Exchange Online, SharePoint Online, Teams, Planner, and more).
• Microsoft Purview for IT Pros.
• Power Platform for IT Pros.
• Automating Microsoft 365 with PowerShell.

All the books are focused on Microsoft 365 tenant administrators. Microsoft 365 for IT Pros used to be called Office 365 for IT Pros, but we decided that we needed to change to align with Microsoft branding...

More information on our web site: https://office365itpros.com/2026/07/01/microsoft-365-for-it-pros/

A recent improvement is the introduction of a small window for incoming Teams calls. It doesn’t sound like a great step forward, but switching to the small window is a surprisingly useful step. The sad thing is that many users won’t know that the option to switch exists because it’s buried in Teams settings. If you’re a busy person who takes lots of Teams calls, switching is definitely recommended.

https://office365itpros.com/2026/06/30/incoming-teams-call-window/

Two recent changes to the Microsoft 365 Copilot Chat app have made the app easier to use. Interaction persistence is better, meaning that chat threads are always created and available to go back to if necessary, and Copilot memory is managed more easily. Copilot memory is an intensely personal capability. If you spend the time to figure out the instructions that Copilot should always remember, the quality of Copilot responses will be much better.

https://office365itpros.com/2026/06/29/copilot-memory-updates/

Recent reports from security companies and others about an attack by the DragonForce ransomware group against a U.S. services company highlighted the use of Teams. It’s true that Teams was involved in this very artful attack, but the most critical point is that the network was compromised well before the attackers went near Teams. And when your network is compromised, all sorts of bad things happen. Stop account and other compromises and stay safe!

https://office365itpros.com/2026/06/26/dragonforce-attack-teams/

Delta queries are a Microsoft Graph mechanism to allow applications to query resources to find objects that have changed since a baseline was established. The technique is most useful for applications that need to synchronize a local store with online content. It’s not an appropriate method to use for reporting changes to Entra ID groups because knowing that an object changed doesn’t mean much by itself.

https://office365itpros.com/2026/06/25/graph-delta-queries-entra-id-groups/

It’s common to find that tenants have many inactive channels in their Teams deployment. Becoming inactive is a natural side-effect of time eroding interest in the topics people discuss in channels. And if you don’t go looking for inactive channels, they’ll remain silently in place doing nothing except acting as a container for potentially obsolete long-over discussions. But we can find inactive channels with PowerShell. What you next is up to you!

https://office365itpros.com/2026/06/24/find-inactive-channels/

The third edition of the Automating Microsoft 365 with PowerShell eBook is now available in EPUB and PDF formats. The paperback version will be available on July 1. This 430-page eBook offers the most comprehensive coverage of automating tenant management operations for Microsoft 365 and includes a swathe of practical, worked-out examples to help tenant administrators build scripts to automate tasks across Exchange Online, Entra ID, SharePoint Online, Planner, administrative APIs (like audit and sign-ins), and more.

https://office365itpros.com/2026/06/23/automating-microsoft-365-3rd/

A new version of the Microsoft Graph PowerShell SDK (V2.38) is available, as is a new version of the Exchange Online Management module. They don’t work well together. It’s annoying and beyond frustrating that two critical PowerShell modules in the Microsoft 365 ecosystem cannot work together. If anything, the situation is getting worse. On the upside, I found out about two cmdlets that I might never use – but who knows!

https://office365itpros.com/2026/06/22/powershell-woes-and-cmdlets

Microsoft is closing a gap in conditional access policies where apps that only request baseline scopes with at least one exclusion are not processed. The rollout has already started and should be finished by mid-August. For most tenants, the change shouldn’t be an issue, but it is possible that some apps are in use that fit the profile and cannot handle conditional access. If MC1223829 appeared in your tenant, it’s time to check.

https://office365itpros.com/2026/06/19/baseline-scopes-ca/

An app written to fetch details of Copilot interactions from the TeamsMessagesData folder suddenly stopped working when the Graph refused to return items. The 403 forbidden error can’t be argued with. It's a pain when apps stop working just because of a change made at an API level. Fortunately, the aiInteractionHistory API fills the gap.

https://office365itpros.com/2026/06/18/copilot-interaction-app/

Microsoft plans to improve the security of the Self-Service Password Reset (SSPR) facility in September 2026 by requiring users to register at least one authentication method. SSPR will then use the registered authentication method to verify user accounts when changing passwords. The change aligns SSPR with user sign-ins and improves security by removing fallback on directory attributes, which might be altered by attackers.

https://office365itpros.com/2026/06/17/sspr-authentication-methods/

July 1, 2026, sees a bunch of monthly price increases that will affect Microsoft 365 tenants. How much will the increases cost your tenant? One way to find out is to use PowerShell to find which licenses assigned to user are affected by the price increases and compute the effect of the monthly increase (which varies across products). It’s a great example of how flexible PowerShell is for tenant management.

https://office365itpros.com/2026/06/16/monthly-license-increase-july-2026/

Sometimes, Microsoft 365 tenants need to remove problematic Teams chat threads from user view. The usual reason is because someone posted some bad or objectionable content to Teams. This article covers how to use Microsoft Graph PowerShell SDK cmdlets to find chat threads, to check thread messages for targeted content, and to remove matching chat threads. The code can be run interactively by an administrator to clean up Teams.

https://office365itpros.com/2026/06/15/delete-teams-chat-threads/

Microsoft will delete unlicensed OneDrive for Business accounts that aren’t paid for (to be archived) after July 2026. Up to now, it’s been possible to leave unpaid-for accounts linger in Microsoft 365 archive until retention policies and holds expire. Now, tenants must decide which accounts they wish to keep and pay for. Unpaid accounts will be removed, even if retention policies or eDiscovery holds apply to their content.

https://office365itpros.com/2026/06/12/unlicensed-onedrive-for-business-2/

Three cmdlets exist to fetch sensitivity labels. One is in the Exchange Online module; the others are powered by Graph APIs. What are the differences between each method and how can you make sure that the set of sensitivity labels fetched by PowerShell is the full set of available labels? These and other questions are investigated in this article.

https://office365itpros.com/2026/06/11/sensitivity-label-ps/

I was asked what the most important step is in the deployment of Microsoft 365 Copilot. It’s a good question. Put simply, although it might seem strange, restricted access is the answer. That is, restricting Copilot access to information stored in Microsoft 365 locations until your tenant is ready for unrestricted Copilot search and retrieval. The fortunate thing is that tools exist today to make it relatively easy to establish guardrails for Copilot, which is exactly what you need to do.

https://office365itpros.com/2026/06/10/microsoft-365-copilot-prep/

Inactive accounts can soak up a lot of paid-for but unused product licenses. With increases for Microsoft 365 licenses due to come into effect from 1 July 2026, it’s time to find and remove unused licenses from inactive user accounts. We discuss two approaches by using the Microsoft 365 Licensing Report or a PowerShell script that assesses inactivity based on sign-in dates and refresh token baselines.

https://office365itpros.com/2026/06/09/find-inactive-accounts/

The BlockContentAnalysisServices sensitivity label setting blocks access to Microsoft connected services for the content of labeled Office documents. The intention is that users assign sensitivity labels with the block setting to protect an organization’s most sensitive files. Regretfully, Microsoft’s documentation and explanation offered in the message center post don’t convey a clear story about its value.

https://office365itpros.com/2026/06/08/blockcontentanalysisservices-label/