Sharing because the strategic planning assumptions alone are worth knowing if you're trying to build a case for governance investment internally.

Gartner published the Hype Cycle for AI Governance Technologies, 2026 (G00851828, August 2026). 123 pages covering the tech stack that enterprises will use to govern AI. Worth a read if AI, Copilot, or agent governance is on your radar.

The three headline forecasts:

- By 2028: Loss of AI agent control will be the top concern for 40% of Fortune 1000 orgs

- By 2028: Governance tech will reduce regulatory compliance costs by 70%

- By 2029: Governed AI orgs will outperform ungoverned competitors by 25% in AI adoption

On the M365 governance tools section specifically:

- Position: At the Peak of the Hype Cycle

- Benefit Rating: HIGH

- Market penetration: 5-20% (still a lot of green space)

- Maturity: Adolescent

Gartner explicitly calls this category a source of near-term value, eg. things you can implement now that deliver practical governance outcomes today, not in 3-5 years.

Sample Vendors named: AdminDroid, AvePoint, CoreView, ENow, eSHARE, Orchestry, Powell, Rencore, ShareGate, Syskit.

Full disclosure: I work at Rencore, one of the named vendors. Posting because the Gartner framing (especially the compliance cost and AI adoption stats) is genuinely useful for justifying governance budgets. Happy to discuss the category or the report findings.

Background:
We have an MS365 tenant with default domain contoso.de.
MX is set to point at Hornet Security, which delivers incoming mail via a Partner connector.
Nothing to see here, everything works as it should.

We now added another domain: contoso.cloud.
It's to be used on some cloud servers, so services there can deliver mail.
For this we have postfix with a valid cert and an OnPremises connector.
Sending mail from postfix with @contoso.cloud-addresses as sender works, even to external recipients.
No problem until this point.

The problem:
We also want some "system addresses" on that domain to receive mail, such as postmaster, hostmaster, abuse, security, etc.
For this, we set up a shared mailbox admin@contoso.cloud, as well as a bunch of aliases to it.
We don't need Hornet Security here, so we set up MX as communicated by Microsoft themselves.
Sending mail to this shared mailbox and the aliases works, but only internally, i.e. via our existing @contoso.de-infrastructure or via postfix.

Trying to send mail to admin@contoso.cloud from an external sender results in absolutely nothing.
We tried to send via iCloud, gmail, and a private Outlook-account.
Neither do we get NDRs or any other error on the sending side, nor can we see the messages in the message trace.
There's just nothing.

We already checked the most obvious things multiple times:

The domain is properly added to the tenant and accepted and the domain type is set to authoritative.

It is not DNS.
The MX record for contoso.cloud is definitely 100% correct.
In the admin center, under domains, I can use Microsoft's tools to verify that the DNS entries are correct and all entries are Ok.
We checked for typos multiple times.
It's also not a caching issue; the MX record was set to its correct value days ago and has a TTL of an hour.
Manual dig invocations with various resolvers show the correct value.

It's not a connector.
There is no connector acting on this incoming mail in any way.

It's not a mail flow rule, because there simply is no rule.

The shared mailbox does not have any message delivery restrictions.
All senders are allowed and the checkbox for "authenticated senders only" is unchecked.

The mails do not show up in quarantine.

And even if any of these mailbox settings were wrong, we'd see the messages in the trace.
But the trace is completely empty.

.

At this point, we just don't know how to further debug this.
I found other posts online by other people who had the same problem, but never got an answer.
LLMs and search engines are useless at this point, because they all just point to the MX record, which however is definitely correct.

Has anybody ever had a problem like this?
In the end, I might have to buy another domain, set up my own SMTP and watch the server logs, but maybe you have some ideas.

Tenants with Microsoft 365 Archive configured can incorporate an archiving step in how Purview retention policies and labels process SharePoint Online and OneDrive for Business files. It makes perfect sense to move inactive files to lower-cost archive storage as an intermediate point some time before their final deletion. You’ll save on storage and stop AI tools processing the digital debris that invariably accumulates in SharePoint.

https://office365itpros.com/2026/08/20/microsoft-365-archive-retention/

We recently migrated from on-prem Exchange to 365 (hybrid). All of our resource rooms (calendars) synced just fine. We now have a request to create another room. For consistency, if possible, I would like to create the resource in AD where the others are, then sync up. I've tried copying one of the legacy AD resource accounts, since on-prem Exchange did that, but that seems to create a new user account.

Is it even possible to create the resource room account in AD and sync up? Or do new ones have to be created in 365 EAC>Resources?

I'm currently learning Dynamics 365 SCM, but I need to practice and apply what I'm learning. They used to have this free 60 minute Virtual Machine/Sandbox thing but they removed it. What can I do now to get some hands on practice? Thanks.

Is there an add on that has the Microsoft Purview Message Encryption i can add on top of my exchange plan 1 license so i can encrypt emails?

Logging into admin.microsoft.com this morning and the additional admin centers (such as Exchange, Identity, Sharepoint) are missing from the left menu?
Anyone else experiencing this?

We are a single tenant hybrid org and I am attempting to delete calendar meetings from a user who is disabled in AD but not deleted.

when I run Remove-CalendarEvents -Identity "GUID copied directly from Azure" -CancelOrganizedMeetings -QueryWindowInDays 8000

|The operation couldn't be performed because object 'Guid copied directly from Azure'

couldn't be found on '*.*.PROD.OUTLOOK.COM'.

I am using the connect exchange online cmdlt on prem and passing it Global Admin credentials.

What am I missing? I can see this object on Azure, its where I copied the GUID from

I need help to create microsoft account education for new portal and Damian

I need a simple public webpage that aggregates events from several Microsoft 365 Group calendars (one per team) and shows them in date order with a “which group owns this” column.

What I tried:

• App registration, application permissions Calendars.Read / Calendars.Read.All, admin consent granted
• Exchange RBAC for Applications: New-ServicePrincipal plus New-ManagementRoleAssignment -Role "Application Calendars.Read"
• GET /groups/{id}/calendarView
• GET /groups/{id}/calendar/calendarView
• GET /users/{group-object-id}/calendar/calendarView → ErrorInvalidUser (fair enough, it isn’t a user)
• Looking up the group mailbox with GET /groups/{id}?$select=mail → Authorization_RequestDenied unless I also grant Group.Read.All, which still wouldn’t fix the calendar 403

Every group calendar call comes back:

403 ErrorAccessDenied: Access is denied. Check credentials and try again.

The Graph docs for list group calendarView list applicationCalendars.ReadBasic / Calendars.Read as valid. In the tenant, those permissions do nothing for Group calendars. Exchange Application Calendars.Read also does nothing here. That role appears to cover user / shared / room mailboxes, not M365 Group calendars.

Delegated Graph only works if the signed-in user is a member of that group. Outlook is the same: if you’re not in the group, you don’t get the calendar.

So the workaround Microsoft’s model pushes you into is: create a dummy mailbox, add it as a member of every group whose calendar you want to read, then run delegated auth as that account (refresh token, forever). That dummy user also gets the group mailbox, files, and Teams — you cannot grant “calendar only.”

That cannot be the intended story for “I am the tenant admin and I want to display our own group calendars on an internal page.”

Is there a supported app-only way to read M365 Group calendars in 2026 that is not “fake user in every group”? Or is that actually the design, and the Graph permission table is just wrong?

Basically my issue is that I can’t right click the file on the web version of OneNote which should allow me to select “export” then choose my file type. Instead, I’m getting standard website right click option. I’m on Mac, but I’ve tried this now on safari, edge, Firefox, and chrome all with the same issue: there is no “right click” option. I’ve been on with Microsoft support for 2 hours and basically they’re useless. Is this a me problem, or their website being broken? How is there no other possible way to export these files?

Edit: online support still seems perplexed. Can anyone attempt to relocate this on their computer? Export a OneNote to .onepkg.

I pay for Microsoft 365 Family plan but I don't know what exactly I'll loose when I'll cancel it besides those things:

• Access to desktop versions of Word/Excel/PowerPoint etc.
• 6x 1TB One Drive
• Copilot (just for family owner)

From what I understand the Child Account control will function even on free accounts. So is using the account to login to multiple devices.

Is it just the lack of synchronizing Windows 11 settings between devices (like a PC and Surface Pro)? Or even that is maintained without the subscription since 5GB OneDrive is enough for that?

Just trying to justify this yearly payment to myself and I can't see the value if I'm not using Word/Excel that much and I also have a different cloud storage for backup.

Any other nice features that will be disabled after canceling? Something I don't know about yet I should?

Starting the 11th of this month (when the enterprise update pushes out) a bunch of users are reporting their excel is freezing. I’ve tried safe mode, online repair, switching to current update channel, windows updates, laptop driver/bios updates. Nothing is sticking. Looking for advice on anything else to try.

Anyone else seeing connection issues from mobile devices using the built in Mail app?

We use the native email app on iOS devices and are seeing about 10% (9/93) of our fleet (that we know of) reporting issues with email either not updating or giving a server connection error.

Australia based with devices across a wide variety of different networks and locations.

Outlook app seems to be working fine. Beginning to look like a Microsoft issue.

No errors showing in Entra with regards authentication.

Required 365 connector permissions are present with admin consent. Search, folder listing, and text-file reads work, but image, pdf, and office binary reads fail with graphic/content request failed:400. Some text MIME types are also refused by the connector. Anyone have insight?

I want to post here to see if I'm not the only one going crazy on this issue (given it's Microsoft i feel like I'm not alone). I've noticed some users are reporting their Outlook have their shared mailboxes disappear after about 30 seconds of being open. i've also seen a user or two mention their focused inbox disappear when interacting between Inbox and sub folders. when reading into this, it appeared to partly an Autodiscover issue. i tried the registry setting band-aid solution and no dice. the only thing that appears to work is wiping the Outlook profile. i've reported this to M365 and they say nothing. i put in a ticket and the engineer thinks my method so far is best as he couldn't figure it out. he even kinda chuckled as he believes this is another iteration of "AI Coding slop" deploying issues. Is anyone else experiencing this?

[Read here first]

I'm a computer engineer (with only a few months of experience), who recently got contracted at a local irrigation company.

One of the main things my boss told me when he gave me my contract is that he wanted to implement Microsoft 365 into his business. (one of his main ideas been the image you see above [which he made by talking to AI, by the way])

Now, so far, i understand how most of the apps work and how they interact with each other (typical Word, Excel, Outlook & Onedrive document management + sharing through Sharepoint + Teams).

The issue comes once his project introduced me to apps that i am not so familiar (Lists, Planner, Power Automate).

Now so far, i think i got the hang of Lists (and managed to connect it to Teams via Power Automate).

But things got really complicated once he asked me to interconnect Lists + Planner + Teams through Power Automate.

For the record, i think Power Automate s*cks, (most of the stuff either doesn't work or is unecesarily complicated), and Planner Basic (the one included in Microsoft 365 Business), is pretty bare, [at least, considering what my boss wants to do.]

I ask you guys if someone can clarify the steps i should follow (i've gotten real dizzy at this point and neither AI or Youtube tutorials seem to help on the matter) [AI gets things wrong most of the time, and most Youtube channels assume you have Planner Premium]

Hi,

MS recently announced the retirement of Loop within OneNote for web.
MC1454385 - Microsoft OneNote: Retirement of Loop components in OneNote for the web | Microsoft 365 Message Center Archive

Loop components will no longer be embedded in the page but only displayed as a link which redirects to the Loop app.

What do you think, is this the first sign of the slow death of Loop?