u/lazyadmin-nl

I wrote earlier about how to find what's still calling EWS in your tenant. But I am seeing and getting a lot of questions about unknown AppIDs and what to do with them.

So I created an overview of the known apps and AppIDs, from Apple Mail to Veeam and Mimecast, with allow-list or migrate status. Missing one? Add it in the comments.

https://lazyadmin.nl/office-365/known-ews-apps-that-need-allow-listing-or-a-migration-with-appids/

Microsoft auto-installed the People, Files, and Calendar companion apps on Windows 11 about a year ago, and back then I already had the feeling they wouldn't last long.

Turns out they are being retired on December 16, 2026. The problem, retiring in this case means that they only stop the backend, not the install.

If you don't remove the apps yourself, they sit there broken on every device that got them.

More info and a PowerShell script to detect and clean up the apps: https://lazyadmin.nl/office-365/microsoft-365-companion-apps-are-being-retired-how-to-remove/

Update September 13: Microsoft has marked this as Mitigated and released an official fix via Known Issue Rollback (KIR GPO). Also: the registry workaround turned out to be unreliable, confirmed failing on Server 2022 21H2. Article updated with download links per server version and deploy steps.

KB5122876/5122882/5122871 breaks RDS session hosts. Hours after reboot, connections hang at "Connecting…", sessions can't log off, and only a hard reset recovers the host.

If your RDS isn't exposed to the internet, postpone the update until Microsoft ships a fix. If you're already hit, there's a registry override that disables the faulting feature flag without uninstalling the CU.

Microsoft is investigating. No official fix yet.

https://lazyadmin.nl/it/september-2026-update-break-rds-how-to-fix/

Microsoft's tightening the Tenant External Recipient Rate Limit (TERRL) further, starting Sept 14, 2026. This one specifically targets new tenants, trial tenants, and EDU tenants, not existing tenants.

Quick summary:

• New tenants get a ramped quota: 10% in the first 31 days, 25% for days 31–60, full quota after that
• Trial tenants drop from 5,000 to 500 external recipients/day
• EDU tenants (free A1 licenses etc.) get a separate formula that weighs purchased licenses way more heavily than free ones

Wrote up the details and some worked examples on the formula since the EDU math is a bit counterintuitive: https://lazyadmin.nl/office-365/exchange-online-tightens-outbound-limits-for-new-trial-and-edu-tenants/

Setting up a new small office or home lab and trying to pick between Omada and UniFi? The Fusion 2.5G sits right between the two most popular UniFi compact gateways, same form factor, similar price range, but different trade-offs.

Compared all three on specs, real-world performance (including the hardware acceleration gotcha on the UCG-Max), VPN throughput, management, ecosystem, and camera support. Also covered when to pick which one depending on your use case.

https://lazyadmin.nl/network/omada-fusion-2-5g-vs-unifi-cloud-gateway-max-ultra/

The MemberOf rule operator for dynamic groups in Entra ID is being retired. After November 3, 2026, any dynamic group, administrative unit, or entitlement management policy that still uses MemberOf just stops updating. Membership freezes in its last known state, no migration, no fallback.

This affects group-based licensing, Conditional Access targeting, Teams and SharePoint access, and access package assignments. For entitlement management policies, processing actually stops a week earlier on October 27.

You can find all affected groups with a single PowerShell command using a server-side Graph filter. The article also covers your replacement options and includes a practical example for group-based licensing without MemberOf.

More info: https://lazyadmin.nl/office-365/microsoft-entra-id-is-retiring-the-memberof-rule-for-dynamic-groups/

I wrote up a walkthrough on creating VLANs on the Fusion gateway and locking them down properly, guest network isolation, keeping IoT gear off your main LAN, and the firewall rules to actually enforce it. Aimed at home labs and small offices.

https://lazyadmin.nl/home-network/omada-fusion-vlan/

TP-Link sent me the new Omada Fusion 2.5G to review, so full disclosure up front: it's a review unit.

It's a small fanless gateway with the controller built in, so no separate hardware or software controller, and no per-device license for the cloud management. Five 2.5G ports, quad-core Cortex-A73 at 1.8 GHz, up to 30 devices and 300 clients.

The part that stood out most is the throughput with security enabled. It does around 2,360 Mbps NAT, and turning on IPS only takes it to 2,183 Mbps, with DPI at 2,206 Mbps. So you keep almost the full 2.5G with the security stack running, which isn't what I'm used to seeing on gateways in this class. Power draw sits around 2-3W.

It's $169.99, with a 5-year warranty and no license fees for the cloud management.

Also covered the setup, the content filtering and IDS/IPS defaults, LightLink VPN, and the diagnostic tools (there's a built-in terminal and packet capture, which exports a pcap).

Full review: https://lazyadmin.nl/home-network/omada-fusion-2-5g-review/

M365 Backup's fixed 1-year recovery window is finally going away. Starting late July 2026, you'll be able to set it per policy, 3 months to 2 years.

Good to know: shortening an existing window permanently deletes anything outside the new range after a grace period, so it's not just a harmless settings change.

Details + how to configure it: https://lazyadmin.nl/office-365/microsoft-365-backup-recovery-window-is-now-configurable/

Microsoft is rolling out an update at the end of May that will enforce OneDrive storage quotas against actual license entitlements. If a user exceeds their licensed quota, whether because an admin set the limit too high or because of an EDU license overage, their OneDrive gets placed in read-only mode.

Read more on what you need to know and a short PowerShell script to find users that are currently over their actual OneDrive storage limit:

https://lazyadmin.nl/office-365/onedrive-storage-limits-enforced-in-june-what-you-need-to-check/