Make sure Deleted items are automatically removed from Microsoft 365 mailboxes

In another “forgotten knowledge” topic, let’s discuss how to automatically clean up/remove items from the Deleted items folder in Exchange Online/Microsoft 365. Nothing has changed in this process for years now, but it looks like people online are still having a hard time finding proper instructions on how to configure …

Continue readingMake sure Deleted items are automatically removed from Microsoft 365 mailboxes

Non-existent users show up in SignInActivity data (or how logs continue to disappoint)

Spotting some strange entries in the output of a Graph SDK cmdlet leads us down the rabbit hole of troubleshooting “missing” GUIDs in Entra ID. Or how SignInActivity data for users’ access to other tenants is collected …

Continue readingNon-existent users show up in SignInActivity data (or how logs continue to disappoint)

Scoping conditional access policies to “tagged” applications

Microsoft has been gradually expanding the reach of its Conditional Access feature, while at the same time also releasing a bunch of controls that allow us to more granularly scope CA policies. Examples in this area include not just the ability to scope policies to a subset of the objects …

Continue readingScoping conditional access policies to “tagged” applications

Using the Graph API to Export eDiscovery (Premium) datasets

Microsoft has steadily been adding Graph API endpoints to cover eDiscovery scenarios, albeit only targeting the “Premium” experience. Just recently, the Export operation become available, bringing full coverage for (Premium) eDiscovery operations. Among other things, eDiscovery export is still being leveraged as one of the few ways to get data …

Continue readingUsing the Graph API to Export eDiscovery (Premium) datasets