Ruud

Blogger at Microsoft MVP, Freelance IT Consultant.

Building DaemonLayer - context-first ticket automation for IT teams.

[Ruud @LazyAdmin]

Microsoft fixed the AS9031519 bounces to https://t.co/TFLuNa6YOw and Hotmail (EX1545193). The cause was a faulty spam rule update, not a missing DMARC as a lot thought:

[Ruud @LazyAdmin]

Office 365 A1 and the Student Use Benefit are retiring. The free replacement, A0, has no mailbox, no Teams and only covers students on Windows devices.

A0 to A7 compared, plus a script to count students that actually use their mailbox:

https://t.co/zq65cwo0cN

[Ruud @LazyAdmin]

Adding one Copilot Business seat now enables usage-based billing for your whole tenant.

Every user can spend up to ~$40/month on Cowork without approval, and you can’t set the limit to zero. Here’s what does work:

https://t.co/Sx6mttuQQO

[Ruud @LazyAdmin]

Conditional Access Policy Plans are now in public preview.

The migration wizard doesn’t tell you which policies belong together, so I wrote a script that finds them.

It also shows what the migration will share, and what you need to move yourself:

https://t.co/3XXVcRtvie

[Ruud @LazyAdmin]

From Nov 4, every Entra user can create agent blueprints unless you turn it off. The creator becomes owner and manages its credentials.

How to restrict it, plus a script to find existing ones: https://t.co/78LSEUA0ti

[Ruud @LazyAdmin]

EWS enforcement starts October 1. $true with no AppID list blocks everything. $NULL isn't blocked on day one, but gets flipped to $false later. Known apps and AppIDs to allow-list or migrate:

https://t.co/R0sMywk7QW

[Ruud @LazyAdmin]

Microsoft auto-installed the People, Files & Calendar companion apps on Windows 11 a year ago. Now they're retiring them, Dec 16 2026. But retiring only kills the backend, not the install, if you don't remove them they sit there broken.

Clean up script: https://t.co/2hMMpEOoak

[Ruud @LazyAdmin]

slmgr.vbs is going away. Not because Microsoft deprecated it, but because it's a VBScript file and VBScript is being retired.

The OSLicense PowerShell module is the replacement:

https://t.co/k2nt5lImYd

[Ruud @LazyAdmin]

September Patch Tuesday breaks RDS on Windows Server. Sessions hang hours after reboot, hosts deadlock, hard reset required.

But the same update patches a CVSS 9.8 RDS RCE. Don't just roll back.

There's a registry fix that keeps your security patches:
https://t.co/zD0nMirV93

[Ruud @LazyAdmin]

Microsoft blocks EWS in Exchange Online on Oct 1

Something in your tenant is probably still using it, and if you don't build the AppID allow-list, Microsoft builds one for you, missing anything that runs monthly or quarterly

Find every app still on EWS: https://t.co/eFEWQ33vI6

[Ruud @LazyAdmin]

Exchange Online's tightening TERRL again, this time only for new/trial/EDU tenants starting Sept 14.

New tenants ramp up over 60 days, trial tenants drop to 500/day.

More info: https://t.co/CiE0S35WTz

[Ruud @LazyAdmin]

Microsoft is now showing license compliance warnings on the Conditional Access page in Entra ID. But the usage blade only shows evaluated users, not targeted users. Big difference.

Wrote a script to find the real gap: https://t.co/EHPuZKfYjA

[Ruud @LazyAdmin]

The Omada Fusion 2.5G competes directly with UniFi's Cloud Gateway Max and Ultra. Compared all three, specs, real-world performance, VPN, ecosystem, and the camera gap. Which one makes sense depends on what you need.

#omada #tplink #unifi

https://t.co/buFGjb0em5

[Ruud @LazyAdmin]

Microsoft is retiring MemberOf for Entra ID dynamic groups. After November 3, affected groups just freeze - no migration, no fallback.

PowerShell script to find affected groups + your replacement options:

https://t.co/Z7Cq0ZEE8a

[Ruud @LazyAdmin]

Reviewed the new Omada Fusion 2.5G.

Built-in controller, license-free cloud management, 5x 2.5G ports, fanless at ~3W. It holds ~2.2 Gbps with IPS and DPI enabled, and LightLink makes remote access painless. Worth a look.

https://t.co/HOZihbICkB

[Ruud @LazyAdmin]

SMS and voice MFA are being retired in Microsoft Entra ID.

The first step is knowing who is affected. Here is how to find the users that still rely on a phone number, and the ones that have no other MFA method registered:

https://t.co/hVBsKPmt2O

[Ruud @LazyAdmin]

Graph API made M365 automation so much easier. One clean API instead of a dozen modules.

Then you hit Exchange Online. Still no proper Graph coverage for a lot of mailbox settings, and the new Exchange Admin API is nowhere near as easy to work with as Graph.

[Ruud @LazyAdmin]

Microsoft 365 Backup is finally ditching its fixed 1-year recovery window.

You'll soon be able to set it anywhere from 3 months to 2 years, per policy. Rolling out late July 2026.

https://t.co/rN9leEEg2t

[Ruud @LazyAdmin]

It's live in beta now, with 50% off for the first 3 months while it's early.

If the "10 minutes of questions before you can even start" problem sounds familiar, happy to show you how it works , reply or DM.

[Ruud @LazyAdmin]

@andreasen_jan Completely agree on that one!

[Ruud @LazyAdmin]

Haven't posted here in a while

20 years in IT, and the thread running through all of it: automate the repetitive stuff. Wrote more PowerShell scripts than I can count, shared a lot about it on LazyAdmin

Spent the last several months taking that a step further. More on that soon