u/KavyaJune

Do you mean you’re looking for an alternative to Power BI for building a complete executive dashboard?

You can try SharePoint with Copilot. You can import report data into a SharePoint list. Then you an build and refine the dashboard using natural language prompts. The dashboard will update automatically when the underlying data changes.

For step-by-step instructions, check this guide: https://o365reports.com/create-live-sharepoint-dashboards-using-copilot/

Hi u/callsignbob1709,

I’m part of the AdminDroid team, so I wanted to clarify that upfront.

I understand your concern about the limited number of reviews. You may be referring to the reviews on the Azure Marketplace, but there are also user reviews on G2: https://www.g2.com/products/admindroid/reviews

You can also find discussions where users have independently recommended AdminDroid when others asked for Microsoft 365 management tool suggestions: https://admindroid.com/wall-of-love

Hopefully, these give you more perspectives to evaluate the tool. If you have any questions, I’m happy to help.

A list of GPO names alone has limited value, though. Including their settings, links to OUs or domains, and status gives you a much more useful inventory.

As part of Cybersecurity Awareness Month, here’s a 31-day interactive cybersecurity game for admins, with a new interactive scenario unlocking each day throughout October.

The challenges focus on practical security situations. Some are quick puzzles, while others ask you to investigate evidence, spot risks, or make access decisions.

No sign-up required. Each will take 2 or 3 mins. Give it a try!

https://admindroid.com/cybersecurity-awareness-month-2026

I can create more than 5 links (Other sharing links). Can you share source for this?

Passkey registration campaign would help.

2038 is coming soon.

Old 32-bit counter will reach its maximum possible value at 03:14:08 UTC on January 19, 2038.

Enabling automatic versioning applies only to new sites and new libraries in existing sites. To enable it for existing sites, you need to configure it at the site level. However, this won’t clean up existing version history or free up storage. It will only affect versions created going forward.

To reclaim storage, you’ll need to clean up existing file versions using the New-PnPSiteFileVersionBatchDeleteJob cmdlet. You can also try this prebuilt script to automate version history cleanup: Automate file version history cleanup using PowerShell

Mail flow rule disclaimers are not primarily intended for email signatures. If your organization mainly uses OWA or the new Outlook for Windows, you can use the Set-MailboxMessageConfiguration cmdlet to configure customized signatures based on department, role, and other criteria.

You can also try this pre-built script to setup email signature: https://o365reports.com/how-to-set-up-an-email-signature-in-outlook-using-powershell/

I have used this script earlier and it worked well.
https://o365reports.com/upgrade-distribution-lists-to-microsoft-365-groups-using-powershell/

Yes, Graph Explorer is great for exploring data. I sometimes find the JSON output a bit inconvenient when I just want to compare specific properties. I’ve been using AdminDroid’s free Graph Explorer for Microsoft 365 for that. It lets you view results in table, tree, or JSON format, and navigate between pages with one click instead of manually copying and pasting the oDatalinks.

Might be useful if you run into the same issue: https://admindroid.com/admindroid-graph-explorer-m365

Yes, it's important to audit credential additions and role assignments for existing Entra applications.

As part of Cybersecurity Awareness Month, here’s a 31-day interactive cybersecurity game for admins, with a new interactive scenario unlocking each day throughout October.

The challenges focus on practical security situations. Some are quick puzzles, while others ask you to investigate evidence, spot risks, or make access decisions.

No sign-up required. Each will take 2 or 3 mins. Give it a try!

https://admindroid.com/cybersecurity-awareness-month-2026

The Zero Trust Assessment tool is a good starting point. Apart from that, there are plenty of security settings you can review to harden Entra. Some involve tightening default settings, while others require enabling or configuring specific security features.

This guide has few settings that might worth checking: https://blog.admindroid.com/microsoft-entra-security-features-that-you-must-enable/

Thanks for the mention! I’m part of the AdminDroid team. We also have a PowerShell Script Gallery where you can search for scripts based on your needs and find the right one more easily:

https://admindroid.com/microsoft-365-powershell-scripts

Connect-MgGraph

As part of Cybersecurity Awareness Month, here is a 31-day M365 cybersecurity challenge focused on identity and security, with a new scenario unlocking each day throughout October.

Some challenges are quick puzzles, while others involve investigating evidence, spotting security risks, or making decisions in realistic scenarios.

There’s no sign-up required, so feel free to give it a try.
https://admindroid.com/cybersecurity-awareness-month-2026

You can check the GitHub repo to get more details and source links: https://github.com/admindroid-community/Microsoft365-Upcoming-Deprecations-and-Changes/

Yes. The Registration Campaign will show the passkey registration prompt after the user successfully completes MFA.

Check the PDC Emulator's Security log around the lockout time and correlate the account with 4771, 4776, and 4625 events. These can give you additional information about the authentication attempt.

This does seem unexpected. Microsoft’s documentation indicates that when the Registration Campaign is Microsoft managed, Microsoft can determine the target authentication method and is moving the campaign toward Passkeys. However, I haven’t seen Microsoft document that an existing Enabled configuration with Microsoft Authenticator would be automatically changed to Microsoft managed.

If this happened across multiple tenants, it would be worth checking with Microsoft Support to confirm whether this is part of a broader rollout or an unintended configuration change.

This could be related to a CA policy, but first check the Entra sign-in logs. They can show whether MFA was completed, satisfied by an existing token claim, or skipped due to factors such as location, device state, or an existing authentication session.

You can also use the Conditional Access What If tool for the affected user. It will show which CA policies apply to that sign-in scenario and what grant or session controls are being applied. This might help you identify why the MFA prompt isn't appearing. https://blog.admindroid.com/what-if-tool-to-test-conditional-access-policies-in-entra-id/

Microsoft Authenticator

I would also include successful sign-in attempts after 'n' number of failed attempts, unusual spike in failed logon attempts.

This reminds me of the days when we used LastLogonTime from Get-MailboxStatistics to identify inactive users. When Entra started exposing the last sign-in timestamps, I finally had a better signal to work with.

I built my inactive-user cleanup automation around lastSuccessfulSignInDateTime. If it's empty, I treat it as the user having no successful sign-in recorded after 2023, so they're a good candidate for cleanup. I haven't faced any problems with this approach so far.