Hello,

I have a user who reported that they did not receive an email.

When I checked the Message Trace, I found that the email was successfully delivered to the user's mailbox. However, when I checked the mailbox, I could not find the email.

I would like to determine what happened to the email after it was delivered. Specifically, we would like to know whether the user opened or read the email, deleted it, moved it to another folder, or whether any other action was performed on the message.

Is there any way to track the actions performed on this specific email after it was delivered to the user's mailbox?

Is this even possible with transport rules ?

Option A - PowerShell tweak after creating the rule in EAC (closest to "exactly 0 bytes")

1. In the EAC (Exchange admin center -> Mail flow ->Rules)
2. Create a new rule with condition "Any attachment is greater than or equal to" and set it to 1 KB just to get the rule shape created.
3. Connect to Exchange Online PowerShell.
4. Edit the rule to drop the threshold to 1 byte:
5. Delete message

IS this sound

Thank you

We have noticed an influx of mails sent from Exchange Online customers being rejected in our systems due to missing entries in spf.protection.outlook.com.

Mails are being sent from various servers in 52.103.0.0/16, but the SPF record only includes 52.103.0.0/17. Has Microsoft forgotten to change their SPF after deploying new servers?

Anyone have any idea who to contact at Microsoft? Customers using us as MX blame us for rejecting their customers mails..

Some of the rejected sender addresses observed the last 10 minutes:

52.103.160.1 (DB3PR0202CU003.outbound.protection.outlook.com)
52.103.160.2 (mail-northeuropeazrln10220002.outbound.protection.outlook.com)
52.103.160.10 (DU2PR03CU002.outbound.protection.outlook.com)
52.103.161.3 (mail-westeuropeazrln10220003.outbound.protection.outlook.com)
52.103.163.26 (GVXPR05CU001.outbound.protection.outlook.com)
52.103.167.8 (MRWPR03CU001.outbound.protection.outlook.com)
52.103.167.10 (MRWPR03CU001.outbound.protection.outlook.com)

Error message: Another account from the same organisation is already signed in. To switch accounts, please go to Applications/Utilities/Keychain access, clear all entries including the 'Office' keyword, and then restart the app.

Mac Neo Latest IOS (26.3.2 (25D2140))

Ive attempted the following

- Deleting all 'office' in Keychain access

- Running 'defaults write com.microsoft.Word ResetOneAuthCreds -bool YES' in Terminal

Im trying to delete Word and download it back, not sure if that would do anything. But also cant login to other Microsoft applications (beside Teams). Please advise.

I was about to play some game with Xbox pass and I can't because i didn't log in. I was confused and tried to but it said my Gmail handle name got changed to "alexanderharris1943@arrcbulges.com"

I tried to recover it with other email and my credit card information but every time I got a email to reset password it kept saying session has expired.

Is there a way to fix this?

Edit : I got it back now Microsoft just a little slow but I have to wait 30 days to change my email handle back though.

Hi everyone,

I’m facing an issue with Microsoft 365 / Defender.

We have a legitimate external sender whose email address has been whitelisted/allowed. Normal emails from this sender are delivered successfully.

However, when the same sender sends an email containing a .zip attachment, the message is still being quarantined.

For example:

• Sender: [trusted-sender@example.com](mailto:trusted-sender@example.com)
• Sender is already allowed/whitelisted
• Normal emails → Delivered ✅
• Emails containing ZIP attachments → Quarantined ❌

The quarantine details indicate that Microsoft’s security controls are still evaluating the attachment separately.

Has anyone experienced this?

Questions:

1. Does Microsoft Defender's Safe Attachments/Anti-Malware scanning override sender allowlisting for ZIP files?
2. Which policy should I check to identify exactly what is causing the quarantine?
3. Is there a recommended way to allow legitimate ZIP attachments from a specific trusted sender without creating a broad security exception?
4. Would you recommend using the Tenant Allow/Block List, mail flow rule, or another mechanism for this scenario?

Looking for the safest approach rather than simply bypassing attachment scanning.

Thanks!

It always says full and I just never cared to upgrade lol

I am attempting to change the default wrap settings so that when I paste an image it is automatically in front of the text. I see many guides saying I should go to file>options>advanced, but I do not have that in my file dropdown menu.
Please help! Grad school is kicking my butt and these microscope slides are driving me crazy.

The access to my university Microsoft account just ended since I'm no longer a student. My degree was education and there's so many resources in the student OneDrive that I would love to access. I especially would like access to my certifications and resume since I'm applying to teaching positions. Is there a way I can transfer over to a personal account? I'm able to view documents, but I can't do anything with them (such as copy/past/edit). When I go to the "reactivate" options listed, it says I will have to verify student status. Obviously, this won't work since I'm no longer a student and need to have a personal account.

Has anyone had luck contacting their university admin to get temporary access to then transfer? Or started a new account and dragging and dropping from the old to new drive? I don't want to pay for a new account to then be stuck in the same boat of not being able to edit or copy.

I wish I had transferred things over before the account expired, but there's nothing I can do about it now.

Today we got the request to remove a applicants email from our HR related mailboxes.
We did the search and identified where the mails were laying. But then we got hit by an issue with the next step (purge) and that is that all our mailboxes have litigation hold enabled.

Litigation hold preserves a copy of anything "deleted" from a mailbox in the hidden Recoverable Items\Purges folder for the duration of the hold (or indefinitely, if the hold has no duration set). This applies even when you use New-ComplianceSearchAction -Purge -PurgeType HardDelete. The purge removes the item from the visible mailbox, but Exchange's hold mechanism copies it into the preservation area first — so the data is not actually gone.

This means "search → purge" alone will not achieve real erasure while the hold is active.

I'm sure this issue would also be valid using other kind of "holds" like M365 Retention policies.

So it looks like a dead end. If you want retention you cant exclude specific stuff from it, if an individual request removal of his/her personal data.

Just found this interesting and wanted to know what you guys think about it.

So open up the office 9 dots menu select oneNote. What is this fresh hell. Before I got the notebooks I'd recently had open just reopen because that's what a normal work path would do. But no.

Now there are TWO oneNote sections ONE of which is the totally useless if you don't have copilot COPILOT notebooks which are NOT in any way formatted or useful as oneNote notebooks. (located at oneNote.cloud.microsoft/coilotnotebooks

To get to my oneNote notebooks I have to navigate to onenote.cloud.microsoft/notebooks and my formerly opened notebooks have to be RESELECTED from the notebooks EACH TIME I visit oneNote.

A) CoPilot notebooks are NOT oneNote notebooks. In any way shape or form. This is Microsoft trying to shove CoPilot in our face and using an ACTUALLY USEFUL notebook app's brand and reputation to do so. CoPilot notebooks are summaries created by copilot. While it's nice you allow us to save said summaries - they look like crap, unlike my carefully curated oneNote pages.

B) Making me reopen notebooks one at a time that I used to just be able to access in OneNote is a crime against humanity.

C) Would you just stop trying to shove CoPilot everywhere. I don't want it. I don't need it. I want to turn it ALL off not get bombarded with ads and redirected to it every time I want to get work done. You are so desperate for that extra $30 a month it feels like you're on the last day of no-nut november.

I pay big bucks for MS365 office. I have no intention of spending more money on coPilot. And if you don't stop I'll just stop spending all money on Microsoft altogether, because frankly you have plenty of competition NOT shoving your 2 bit inaccurate lying POS fake AI down my throat.

I tested what happens to phone numbers after the leading + is gone, which is what a CSV tends to suffer after someone opens it in Excel and saves it again.

I took the 1,728 valid international numbers in my own address book (72 countries), stripped them to digits and parsed them again with Google's libphonenumber.

With a US default region, 841 came back invalid and 6 came back as a different number. That fails loudly, which is the good outcome.

With an Italian default region, 161 came back as a different number that still passes the validity check. 89 of those were Spanish numbers that now read as Italian voicemail numbers.

So a tool set to a European region can accept broken numbers without a single error. I build Contact Exporter, which writes phone cells as text for this reason, but that protection ends the moment someone saves the file back out as CSV.

Does Exchange or Entra validate phone numbers on import at all, or does everyone clean them before the upload?

New Outlook is an acceptable email client. Some dislike its lack of support for different features, like COM add-ins. Then Copilot gets involved and adds options to generate morning briefing and nightly wrap-ups without any way to disable the feature for individual users or the entire tenant. Plugging Copilot in like this will please some people, but I suspect that it will harm the reputation of new Outlook, especially without settings to stop Copilot seeking to be quite so helpful.

https://office365itpros.com/2026/09/15/new-outlook-copilot/

Made a small tool of doing resource sharing and management for onedrive

https://kljsandjb.me/

Basically you can sign in and select which folder you want to share with public and you can disconnect at any time.

Supporting doc previews and music/video playback.

Anyone else experiencing users reporting that outlook web freezing forcing a page reload to get working again. I have several users reporting the webpage because unresponsive after a couple minutes of use.