u/lazyadmin-nl

Microsoft's tightening the Tenant External Recipient Rate Limit (TERRL) further, starting Sept 14, 2026. This one specifically targets new tenants, trial tenants, and EDU tenants, not existing tenants.

Quick summary:

• New tenants get a ramped quota: 10% in the first 31 days, 25% for days 31–60, full quota after that
• Trial tenants drop from 5,000 to 500 external recipients/day
• EDU tenants (free A1 licenses etc.) get a separate formula that weighs purchased licenses way more heavily than free ones

Wrote up the details and some worked examples on the formula since the EDU math is a bit counterintuitive: https://lazyadmin.nl/office-365/exchange-online-tightens-outbound-limits-for-new-trial-and-edu-tenants/

Setting up a new small office or home lab and trying to pick between Omada and UniFi? The Fusion 2.5G sits right between the two most popular UniFi compact gateways, same form factor, similar price range, but different trade-offs.

Compared all three on specs, real-world performance (including the hardware acceleration gotcha on the UCG-Max), VPN throughput, management, ecosystem, and camera support. Also covered when to pick which one depending on your use case.

https://lazyadmin.nl/network/omada-fusion-2-5g-vs-unifi-cloud-gateway-max-ultra/

The MemberOf rule operator for dynamic groups in Entra ID is being retired. After November 3, 2026, any dynamic group, administrative unit, or entitlement management policy that still uses MemberOf just stops updating. Membership freezes in its last known state, no migration, no fallback.

This affects group-based licensing, Conditional Access targeting, Teams and SharePoint access, and access package assignments. For entitlement management policies, processing actually stops a week earlier on October 27.

You can find all affected groups with a single PowerShell command using a server-side Graph filter. The article also covers your replacement options and includes a practical example for group-based licensing without MemberOf.

More info: https://lazyadmin.nl/office-365/microsoft-entra-id-is-retiring-the-memberof-rule-for-dynamic-groups/

I wrote up a walkthrough on creating VLANs on the Fusion gateway and locking them down properly, guest network isolation, keeping IoT gear off your main LAN, and the firewall rules to actually enforce it. Aimed at home labs and small offices.

https://lazyadmin.nl/home-network/omada-fusion-vlan/

TP-Link sent me the new Omada Fusion 2.5G to review, so full disclosure up front: it's a review unit.

It's a small fanless gateway with the controller built in, so no separate hardware or software controller, and no per-device license for the cloud management. Five 2.5G ports, quad-core Cortex-A73 at 1.8 GHz, up to 30 devices and 300 clients.

The part that stood out most is the throughput with security enabled. It does around 2,360 Mbps NAT, and turning on IPS only takes it to 2,183 Mbps, with DPI at 2,206 Mbps. So you keep almost the full 2.5G with the security stack running, which isn't what I'm used to seeing on gateways in this class. Power draw sits around 2-3W.

It's $169.99, with a 5-year warranty and no license fees for the cloud management.

Also covered the setup, the content filtering and IDS/IPS defaults, LightLink VPN, and the diagnostic tools (there's a built-in terminal and packet capture, which exports a pcap).

Full review: https://lazyadmin.nl/home-network/omada-fusion-2-5g-review/

M365 Backup's fixed 1-year recovery window is finally going away. Starting late July 2026, you'll be able to set it per policy, 3 months to 2 years.

Good to know: shortening an existing window permanently deletes anything outside the new range after a grace period, so it's not just a harmless settings change.

Details + how to configure it: https://lazyadmin.nl/office-365/microsoft-365-backup-recovery-window-is-now-configurable/

Microsoft is rolling out an update at the end of May that will enforce OneDrive storage quotas against actual license entitlements. If a user exceeds their licensed quota, whether because an admin set the limit too high or because of an EDU license overage, their OneDrive gets placed in read-only mode.

Read more on what you need to know and a short PowerShell script to find users that are currently over their actual OneDrive storage limit:

https://lazyadmin.nl/office-365/onedrive-storage-limits-enforced-in-june-what-you-need-to-check/