Retiring a Microsoft 365 tenant; Identity/SSO: how do I avoid losing access to Microsoft Learn, Certifications, Communities, Partner Center and other accounts?

I'm preparing to permanently retire a Microsoft 365 tenant.

I've already handled the obvious aspects:

  • OneDrive and SharePoint data exported or reviewed
  • Email migrated elsewhere
  • Domains moved away from Microsoft-hosted services
  • Teams and collaboration content assessed
  • Backups preserved

My concern is no longer data. It's identity.

Over the years I have used a work/school Microsoft identity as the default sign-in for a large number of Microsoft and third-party services. The tenant will eventually be deleted, meaning the underlying Entra ID identity will cease to exist. I use my own registered domains so I will keep the exact same email address (simply it won't be managed by exchange/M365 anymore).

I am trying to avoid discovering, months later, that I can no longer access a service because it was silently relying on that identity.

Examples of services I know are currently associated with the work identity include:

  • Microsoft Learn
  • Microsoft Certifications / Credentials
  • Microsoft Fabric Community
  • Microsoft Tech Community
  • Partner Center

The larger challenge is identifying the services I may have forgotten.

So far I've looked at:

  • MFA registrations
  • Enterprise applications / service principals
  • Browser profile information
  • Browser history and authentication traces

Those sources provide hints, but none provides a definitive list of every service where the identity has been used.

For those who have already retired a Microsoft 365 tenant:

  1. How did you identify all external services still dependent on the tenant identity?
  2. Which Microsoft services required special handling before tenant deletion?
  3. Which services allowed you to move or associate the account with a personal Microsoft account?
  4. Is there any reliable way to inventory where a work/school Microsoft identity has been used for authentication?
  5. What were the most common "I wish I had checked that before deleting the tenant" surprises?

My objective is not to preserve tenant resources.

My objective is to preserve access to any accounts, profiles, certifications, communities, subscriptions, reputations, or services that currently depend on the work identity before the tenant is permanently removed.

I am of course one of those who had E3 Developer and is moving away (already planned because I want to own my data, but that gave it a boost ;) ).

Thanks!

reddit.com
u/erparucca — 5 days ago
▲ 5 r/gdpr

Au10tix forced consent?

Microsoft is forcing me to verify my ID. The only way they provide is through Au10tix.

Beside the fact that no link to the privacy policy is shown at the beginning when they request an email and mobile number, it seems to me that there is no way to obtain provide consent to use personal data only for ID verification (without providing consent for AI training):

https://preview.redd.it/vc3bhvapivph1.jpg?width=1080&format=pjpg&auto=webp&s=2c60a739334027fb9780c6912d3c105c707cc143

If I try to click on No, THANK YOU, I get:

https://preview.redd.it/1vfeu4kuivph1.jpg?width=1080&format=pjpg&auto=webp&s=8faa385221f1e8dd332aec2156cc742e9bc866bb

I am glad to know I can exercise my rights LATER, but I would just like to only give consent to what I must use the service for: get my identity verified.

Questions:

  1. can anyone confirm this is not "freely given consent" as I am forced to provide it in order to use the service?

  2. Has anyone used the service and can confirm that "contact administrator" error in reality is "you must provide consent in order to move on"?

Thanks!

reddit.com
u/erparucca — 29 days ago

Impossible to remove imported visuals without taking risks

working on a report. Tried to import a few visuals that at the end I decided not to use.

Seems to me it's impossible to remove them from the report.

  1. Yes, I verified that the imported visual is not used in the report anymore (I had created one visual using it and then deleted it)
  2. No, right click on the imported visual's icon doesn't show "remove"
  3. No Microsoft document found on how to remove the imported visuals
  4. Non-Microsoft sources suggest to manually edit the report's code: high-risk

Should I assume Microsoft provides no way of removing an imported visual from a report? That would be worth a blog post on how this is not at all acceptable in enterprise environments: let's assume an imported visual is blacklisted from the enterprise as untrusted; what Microsoft expects its customers to do, recreate all the reports from scratch?

solved by u/Sad-Calligrapher-350 : There are those three dots on the visualizations pane wherein you can choose „remove visuals“.

reddit.com
u/erparucca — 1 month ago

Onedrive for business stuck at 10GB since Friday, support assistant not working

E3 developer licence. Since Friday, The onedrive size has been set by MS to 10GB per user despite all everything saying I (global tenant admin) can use/allocate more. Spport assistant doesn't work (tried both in edge: blocked content and firefox: nothing appearing). How the heck do I open a ticket?

https://preview.redd.it/np79c7j7zpmh1.png?width=632&format=png&auto=webp&s=b71bc93f20d4fc15d8e5c16d293e0e5ad3fce55e

Subject: OneDrive storage quota incorrectly reduced to 10 GB

My OneDrive for Business storage quota was unexpectedly reduced to 10 GB approximately 2-3 days ago.

Tenant details:

- License SKU: DEVELOPERPACK (Office 365 E3 Developer)

- Tenant default OneDrive storage limit: 1024 GB

- User: xxxxxxxxxxxxxxxxxxxxx

Evidence:

- Microsoft 365 Admin Center shows the organization's default OneDrive limit is 1024 GB.

- The user account is configured with a maximum storage of 10 GB.

- SharePoint Online PowerShell returns:

Get-SPOSite 'https://xxxxxxxxxxxxxx-my.sharepoint.com/personal/yyyyyyy'

StorageQuota : 10240

StorageQuotaType : UserSpecific

Issue:

- The personal OneDrive site has been changed to a UserSpecific quota of 10240 MB (10 GB).

- The quota is inconsistent with the tenant default limit of 1024 GB.

- OneDrive reports the site as full because usage now equals the 10 GB quota.

Actions already performed:

- Verified tenant default storage limit remains 1024 GB.

- Verified license assignment.

- Connected using SharePoint Online Management Shell.

- Confirmed StorageQuotaType = UserSpecific.

- Attempted to remove/reset the UserSpecific quota using SharePoint Online PowerShell.

- Quota remains 10240 MB.

Request:

Please investigate the backend quota assignment for this OneDrive site and restore the correct OneDrive quota according to tenant entitlement. Please remove the incorrect UserSpecific quota and reapply the default tenant allocation.

reddit.com
u/erparucca — 1 month ago
▲ 4 r/gdpr

Tracking pixels: conflicting guidelines across countries (FR/IT)

CNIL (France) and Garante (Italy) both published guidelines on how to deal with tracking pixels. Both agree that explicit consent is required and without it tracking pixels can't be used.

The huge difference lies in what happens during the transition window (3 months for CNIL, 6 months for Garante):

- CNIL says that existing users (collected email addresses) have to be informed of the changes and must be provided with an easy-to-use opt-out link. Without action, controllers can keep using tracking pixels

- Garante says that existing users have to be informed of the changes and tracking pixels can't be used anymore unless the user explicitly opts in

Scenario: a citizen living in Italy has registered to a newsletter before april 16th (start of the transitioning window) and is sent, accordingly to CNIL's guidelines, an email notifying him/her that tracking pixels have been/are being/will be used unless he/she opts out. His/her local DPO's guidelines though state he/she must not receive tracking pixels if no action is taken. What happens if the citizen raise a complaint to the DPA (Garante)?

reddit.com
u/erparucca — 3 months ago

X1C Gen9 custom display: which 0.4-0.5mm adapter to use?

B140QAN06.T has 20682-040E-02 connector with 40 pins at 0.4mm pitch but, my mistake, the panel doesn't fit the top cover
B140QAN04.H has 20738-040E-02 connector with 40 pins at 0.4mm pitch and fits but still

cable: DC02C00N700 (from X1 Gen 9 MB to 40 pins, I'd guess 0.5mm pitch).

Problem: No adapter such as the one in the picture (which I bought and tried) seem to fit the screen (or the DC02C00N700)

https://preview.redd.it/4fbd87cneoah1.png?width=220&format=png&auto=webp&s=7440a8fab54cc3bbbb39a03c5930462672ce8b96

according to this post, the official cable ends (panel side) with a 0.5mm pitch connector as the AUO B140QAN03.H has a 20765-040E-11A connector with 40 pins at 0.5mm pitch but the monitor I bought has 0.4mm pitch. Can anyone recommend the right adapter (or alternative cable from another thinkpad that uses same connector on MB side and 40pin 0.5mm on display side)?

Please, before answering: I am not asking which panel to use. I am asking which adapter to use.

Thanks.

reddit.com
u/erparucca — 3 months ago

Power BI Report can't refresh anymore since I tried to move it on prod

I hope I am missing something stupid and that another point of view will pinpoint the culprit.

I have a power BI report that through about 20 queries pulls data from:

  • Semantic Models
  • Gen 1 dataflows
  • 1 Excel file on sharepoint

I have been building the report from scratch for the last 5 months and the time to publish it and link to a service account has come. Problem 1: the report doesn't refresh anymore, even on PBI desktop. Problem 2: I find it extremely difficult to debug what the problem is as the report, which used to refresh in about 45 minutes, doesn't generate errors: on PBI service it simply stays in a refreshing state for hours (5+) without returning any error, on PBI desktop it times out or crashes the app.

What I have tried:

- refreshing critical (resource intensive) queries individually both on PBI desktop and SSMS (connecting to the XMLA endpoint) : works

- restoring permissions from service account to my account (no changes)

Next troubleshooting steps:

  1. copy all the queries into a blank file (to exclude file corruption)
  2. copy the queries into a blank file one by one (if 1 succeeds)

Questions:

  1. Did anyone already face similar issues?
  2. How would operate to diagnose and fix the problem?

Don't hesitate to ask for additional information I may have omitted. Thanks!

EDIT: I've noticed that even minutes after closing Power BI Desktop, I still have mesh processes consuming large (2GB) amounts of RAM. Not a good sign but I don't know what that could imply and/or what causes it.

reddit.com
u/erparucca — 3 months ago
▲ 10 r/homelab

Can't flash HBA330 Mini Mono to LSI 9300-8i

I have a poweredge r730xd with an HBA330 Mini Mono (proprietary PCIe slot). IT has a problem with some specific seagate SAS drives that prevents them from using EPC (going various idle/standby state after a chosen lapse of time). to know more you can look here: https://github.com/Seagate/openSeaChest/issues/111

I want to flash the original avago firmware that doesn't seem (from what I read) to present the issue.

Problem: flashing from UEFI does not allow the firmware to be flashed (see error here: https://www.reddit.com/r/unRAID/comments/1j0bo45/lsi_930016i_mfg_page_2_mismatch_firmware_flash/ ). There is a dos mode that allows to do that but it requires the card to be in the first PCIe slot which obviously I can't change as the mini controller uses a proprietary connector.

I can't even use a pciE HBI because even the connector on the controller going to the backplane is proprietary.

Does anyone know if there a way to have that 9300-8i flashed on the HBA330 Mini Mono?

I've been reading of taping some PCIe pin on the normal PCIe version (which obviously I can't do) or a jumper but I see none unless it's hidden under the heatsink. Or perhaps shorting one of the tracks?

https://preview.redd.it/59s1kl7bq46h1.png?width=1200&format=png&auto=webp&s=b119188c50401c38e7c3303e7df9c92d917cce7c

EDIT: yes, I tried under DOS and the card is, as expected, not detected, even after disabling MMIO in the BIOS.

Thanks!

reddit.com
u/erparucca — 4 months ago
▲ 2 r/gdpr

unsolicited emails after filling a form to get a quote

I am in the process of searching an insurance for a flat. Most insurance companies require to enter an email address and phone number (beside some necessary questions such as the type/size of the place, etc.).

  1. they all state that the personal data will only be used for the purpose of producing the quote which to me seems confirmed by...

  2. ...the fact that some of them have an optional check to approve receiving emails for marketing/commercial purposes

Despite that, some of these companies are sending:

- best case scenario "you have a pending quote!" emails

- worst case scenario: simple and pure commercials for their products/services

Given:

- no explicit consent was given for anything (excluding automatically any kind of approval to use personal data for something different from what it was provided for: creating a quote)

- I am not a customer (I just want to compare quotes from different companies)

What am I missing? What could these company leverage as a valid purpose to send emails different from receiving the requested quote?

Thanks!

reddit.com
u/erparucca — 4 months ago

iDRAC 8 misbehaving but not dead (yes I've been through many, if not all, posts)

PE R730XD system boots, iDRAC is reachable... for a while. Then stops responding.

Most probably the eMMC, but swapping the motherboard offers no guarantee that the one I buy will last long.

the idrac is still reachable (but stops responding after I login on web ui and I try to launch a session), any recovyer I can try? SD recovery doesn't seem to work (2GB SD card, tried both FAT and FAT32). I was able to flash through tftp but that didn't solve the problem. Reset from lifecycle controller seems to make it respond again temporarily but doesn't fix the problem.

I can spend about 50€ to have the eMMC replaced if I provide the motherboard and the chip.

Question 1) how to safely source the eMMC chip? Problem being that I have no way to test it and I will pay for the operation whether the new chip is defective or not.

Question 2) given the iDRAC is still reachable, anything else that I can try ? I have a CH341A if that can help. I would avoid soldering anything to get serial connection.

Thanks!

EDIT: example of behavior happening right now; iDRAC answers to ping but doesn't to IPMI/SSH. web GUI times out.
Not shown: 997 closed tcp ports (reset)
PORT STATE SERVICE
22/tcp open ssh
80/tcp open http
443/tcp open https

reddit.com
u/erparucca — 5 months ago
▲ 0 r/gdpr

Mobile app blocked 20 years old account with no advice because it appears on haveibeenpawned

facts: I have used an app for about 20 years with my email address which, probably as all the email addresses that old, appears in the ahveibeenpawned list.

This has been done without any kind of prior advice or alternate solution (changing email address associated to the account, changing password or just saying "we'll block your account in x days").

The company has confirmed in writing that nothing wrong on my (account's) side has been done so it's not like my account has been hacked and leveraged to bother other users. They also confirmed that they still have all of my data but simply blocked the account from accessing the platform.

opinions: the company has been already fined multiple times and big amounts for non-respecting GDPR while also exposing sensitive data and has an history of pursuing people who reported flaws rather than thanking them (and without fixing the issues for years until they've been forced by authorities to do so) not to mention the fact that for decades they didn't prevent fake accounts to be created and spam other users with ads. This makes me think that rather than spending money on securing their systems from bots trying to access accounts using available email/password lists, they preferred to simply ban those email addresses.

Emotions: I am very annoyed as after 20 years of usage, even if I recover my personal data (chats, photos, etc.), not having access to my account and eventually creating a new one, means I can't contact the persons I was in touch with nor they will be able to contact me. This is the first time ever I witness a company simply blocking accounts because of their email address used to login is the haveibeenpawned list.

Questions: Ok, I know I can send an email to request a copy of my data (art. 15) or to have it deleted (art. 17) but 1) is all that legal? What I am thinking: they keep my data while refusing to provide the service the data was provided for so if I can't use the service under which legal basis to they "detain" my data? I could use art. 16 to have my email address changed but I guess that would not imply the would remove the ban. 2) Anything you can think of I could leverage to force them to reactivate my account?

Thanks!

reddit.com
u/erparucca — 5 months ago

in search of a replacement for UP2516D (max 25" min 2560x1440 res and 90%+ adobeRGB)

I use 4x UP2516D monitors in a 2x2 matrix with an arm that can support max 25" (nominally 24, but 25 fits fine).

One of the screen started having a purple border all around and as they served me well for years (probably 10 now) I am considering replacing them.

Problem: I can't find a single model of monitor that satisfies my requirements:

  • more than 90% adobeRGB color gamut (I don't car about DCI 3P: I work with photos, not videos). I know the UP2516D can have uniformity issues but statistically one out of four (in which I would display full screen preview) is more than fine
  • no more than 25": 1) My arm would support them 2) the surface would be too big not to trquire frequent neck movement to watch all the area
  • at least 2560x1440/118 ppi
  • Price below 400€/unit

I don't mind buying new or 2nd hand. If anyone has any clue/can point me to a model: thank you!

reddit.com
u/erparucca — 5 months ago

Impossible to use split screen to scribble data into (whatever) open app?!

I hope someone will prove me wrong but after searching for a while it seems to me there is no way to have a full screen scribble keyboard sending text to the app on the other half.
Example: Obsidian opened on the left. I want to be able to scribble in the right part and text be converted to exactly where the cursors is/was in Obsidian.

Requirements: must be work on TAB X C without any account (google, boox or anything else), must work offline.

Having to copy aste or other intermediate flows would interrupt my thinking flow so no, having another note appplication on the right and writiing notes in it is not a valid answer.

thx!

reddit.com
u/erparucca — 5 months ago

Bouygues: je les contacte pour sim non livrée, ils m'en facturent une autre sans consentement!

le 5 mai je commande à u/bouyguestelecom une multi-sim (4€). le 7 je reçois un SMS sur la SIM principale du contrat en m'informant que ma SIM a été activée (il serait trop de me demander de l'activer quand je la reçois n'est-ce-pas?!). Le 8 étant férié, j'attends, mais aujourd'hui (le 9) je vois qu'elle n'est toujours pas dans ma boite à lettre.

Je contacte leur service client qui me fais une résiliation et une nouvelle commande de son gré, sans demander mon accord:

https://preview.redd.it/m31wzpaht40h1.png?width=1080&format=png&auto=webp&s=785cfe28b6b8c0fd27a91aa6d7dd6be0f3571cc1

en sachant qu'une LRAR me coûtera plus cher que la carte elle-même et qu'il semblerait que nombreux problèmes sont créés, ou au moins pas corrigés, volontairement (par exemple le fait que je n'aie jamais demandé/accepté de payer par prélèvement et que le site ne me permet de payer qu'après l’échéance de la facture ce qui engendre 10€ de retard de paiement sur un autre abonnement à 2€).

Deux questions pour vous:

  1. Il me semble que cela soit illégal de me facturer des services/modifier mon contrat sans mon consentement, encore plus si cela engendre des coûts. Pourriez-vous svp me confirmer cela?
  2. quels sont les recours? Mon but n'étant pas d’être remboursé mais de faire arrêter ces pratiques.

Merci!

PS: mes excuses si le ce termine au lieu de se termine vous pique les yeux mais j'étais hors de moi :)

PPS: "un geste exceptionnel"; moi je fais les choses dans les règles, on n’exécute pas le contrat, on me fait payer une 2ème fois et je dois supplier un geste exceptionnel?!?!

Pour Bouygues si jamais ils passent par ici: vous démarrez le service avant que je reçoive la SIM, je vous appelle pour des informations, résiliez unilatéralement le contrat d'un service dont je n'ai jamais pu me servir, et vous m'en souscrivez un autre sans mon accord. Et en plus vous me dites que je dois vous demander un geste exceptionnel tant que j'ai fait tout dans les règles (et j'avais pris contact juste pour être sur que la SIM n'ait pas été captivé par un tiers)? LU-NAI-RE!

reddit.com
u/erparucca — 5 months ago