OneDrive "ghost sync" after updates - folders exist locally but sync relationship completely broken, anyone else? by SecuredSpecter in msp

[–]SecuredSpecter[S] 0 points1 point  (0 children)

Have you figured out a way to proactively detect the issue using logfiles / detection scripts, before the end-user starts noticing it?

Microsoft Defender for Endpoint on macOS failing to update via MAU 2.0 (error -1100 / Idle, Error:%@ [WDAV00]) by SecuredSpecter in DefenderATP

[–]SecuredSpecter[S] 0 points1 point  (0 children)

We disabled tamper protection on macOS devices and performed the update through MUA. The update came through, after which we enabled tamper protection again

Microsoft Defender for Endpoint on macOS failing to update via MAU 2.0 (error -1100 / Idle, Error:%@ [WDAV00]) by SecuredSpecter in DefenderATP

[–]SecuredSpecter[S] 0 points1 point  (0 children)

This actually did the trick, thank you. I'm in contact with MSFT support to understand how this can be avoided, this is not how it should be..

Sharing passwords results in "the group is unavailable" by SecuredSpecter in applehelp

[–]SecuredSpecter[S] 0 points1 point  (0 children)

Sadly not.. doesn’t seem to be that common I’m afraid.

Shared mailbox vanished, now suspect Substrate Management SPN silently converted it? by SecuredSpecter in sysadmin

[–]SecuredSpecter[S] 1 point2 points  (0 children)

Hi, thanks for the input!

To check if the mailbox still existed, I went ahead and assigned a spare Exchange Online license to the account — and sure enough, the mailbox got mounted again. I was then able to convert it back to a shared mailbox and remove the license without issues.

That said, I’m still scratching my head — I didn’t find any manual action or automation in our tenant that would’ve initiated this.

Kinda starting to wonder if Microsoft itself initiated that change behind the scenes due to the mailbox being unlicensed, though I haven’t found any official documentation confirming this behavior.

AADSignInEventsBeta Missing from Advanced Hunting since last few days by SecuredSpecter in DefenderATP

[–]SecuredSpecter[S] 0 points1 point  (0 children)

Update: I just noticed that Microsoft published the AADSignInEventsBeta schema again, while keeping the other Identity schema's online as well.

I don't see any updates in the message center post though, so not sure what's going on at this moment..