Guides

Rollout, prompt patterns, agents, and governance.

• Copilot agents and Agent Store governance
• Copilot grounding vs SharePoint search
• Copilot in Excel: Advanced Analysis with Python
• Copilot in Excel: formula columns, tables, and charts
• Copilot in OneNote
• Copilot in Outlook: reply drafts and Coaching
• Copilot in Outlook: thread summary and meeting prep
• Copilot in PowerPoint: Designer and brand templates
• Copilot in PowerPoint: speaker notes and translation
• Copilot in Teams chat: catching up and summarising
• Copilot in Teams meetings: recap and action items
• Copilot in Word: draft from an outline and referenced files
• Copilot in Word: rewrite modes and Coach
• Copilot in Word: summarise a document and reference a file
• Copilot Notebooks explained
• Copilot Pages and Loop components
• Copilot Prompt Gallery and prompt governance
• Copilot Studio agent design patterns
• Copilot Studio explained
• How to enable Microsoft 365 Copilot for a pilot group
• Microsoft 365 Copilot adoption playbook
• Microsoft 365 Copilot data access and permissions
• Microsoft 365 Copilot data security and privacy
• Microsoft 365 Copilot extensions and plugins
• Microsoft 365 Copilot for Sales
• Microsoft 365 Copilot for Service
• Microsoft 365 Copilot in Excel
• Microsoft 365 Copilot in Outlook
• Microsoft 365 Copilot in PowerPoint
• Microsoft 365 Copilot in Teams
• Microsoft 365 Copilot in Word
• Microsoft 365 Copilot licensing
• Microsoft 365 Copilot pilot best practices
• Microsoft 365 Copilot prompt engineering for users
• Microsoft 365 Copilot rollout prerequisites
• Microsoft 365 Copilot use cases by role
• Microsoft Security Copilot
• Restricted Content Discovery for Copilot
• Teams app development for Microsoft 365 Copilot
• What is Microsoft 365 Copilot?

Power Apps, Power Automate, Power BI, Power Pages, and Dataverse.

• AI Builder document processing
• Dataverse explained
• Power Apps — canvas vs model-driven
• Power Apps canvas app performance tuning
• Power Automate cloud flows — a deep dive
• Power Automate desktop flows and RPA
• Power Automate error handling patterns
• Power Automate Process Mining
• Power BI content certification and endorsement
• Power BI dataflows and Fabric dataflows
• Power BI deployment pipelines
• Power BI paginated reports
• Power BI Pro vs Premium Per User vs Fabric capacity
• Power BI row-level and object-level security
• Power BI semantic model design
• Power BI workspace design
• Power BI, Microsoft Fabric, and semantic models
• Power Fx primer
• Power Platform Center of Excellence (CoE) Toolkit
• Power Platform custom connectors
• Power Platform DLP policies
• Power Platform environments and governance
• Power Platform licensing explained
• Power Query primer
• What is Power Apps?
• What is Power Automate?
• What is Power BI?

Meetings, channels, Teams Phone, Rooms, and policies.

• External access and guest access in Microsoft Teams
• Handling a Teams Rooms fleet certificate expiry
• How to enable guest access in Microsoft Teams
• Microsoft 365 Groups vs Teams vs SharePoint sites
• Microsoft Teams apps and tabs
• Microsoft Teams channels explained
• Microsoft Teams meeting policies
• Microsoft Teams meetings best practices
• Microsoft Teams Phone
• Microsoft Teams Rooms
• Microsoft Teams Shifts for frontline workers
• Microsoft Teams templates
• Microsoft Teams vs Slack
• Microsoft Teams vs Zoom
• Microsoft Teams webinars and town halls
• Migrating Teams voice: Direct Routing to Operator Connect
• Private vs shared channels in Microsoft Teams
• Recovering a deleted Team and its data
• Sensitivity labels for Teams meetings
• Teams app permission policies design
• Teams auto attendants and call queues
• Teams breakout rooms
• Teams Calling Plans and Operator Connect
• Teams chat retention and policies
• Teams Common Area Phones
• Teams compliance recording
• Teams external collaboration patterns
• Teams live captions and translation
• Teams meeting policies design
• Teams meeting recording management
• Teams Phone Direct Routing deep dive
• Teams Phone emergency calling
• Teams Premium features deep dive
• Teams Rooms deployment and management
• Teams shared channels vs standard channels
• Teams town hall vs live events vs Stream
• Teams Walkie Talkie and frontline workflows
• Teams webinars vs meetings: differences and licensing
• Teams: "what did I miss?" — catching up mid-meeting
• What is Microsoft Teams?

File collaboration, sites, libraries, sync, and Syntex.

• Handling an accidental external-sharing exposure
• Handling an accidental mass delete of SharePoint files
• How to restrict external sharing for a SharePoint site
• Microsoft Syntex — content AI for SharePoint
• Migrating from file shares to SharePoint and OneDrive
• OneDrive Files On-Demand deep dive
• OneDrive for Business vs OneDrive (personal)
• OneDrive Known Folder Move
• OneDrive Personal Vault
• OneDrive sharing and permissions
• OneDrive storage quotas and limits
• OneDrive sync administration best practices
• OneDrive sync client deep dive
• OneDrive sync troubleshooting
• OneDrive vs Dropbox
• Recovering deleted OneDrive files after the recycle bin
• SharePoint Advanced Management
• SharePoint and Microsoft Syntex content processing
• SharePoint communication sites deep dive
• SharePoint document libraries — a deep dive
• SharePoint Embedded
• SharePoint external sharing
• SharePoint Framework (SPFx) overview
• SharePoint hub permissions and inheritance
• SharePoint hub sites
• SharePoint information architecture
• SharePoint large list handling
• SharePoint list and column formatting (JSON)
• SharePoint Lists vs Microsoft Lists
• SharePoint Migration Tool deep dive
• SharePoint multilingual sites
• SharePoint page design and web parts
• SharePoint permissions explained
• SharePoint search and crawl architecture
• SharePoint search and Microsoft Search
• SharePoint team sites vs communication sites
• SharePoint vs Confluence
• What is OneDrive?
• What is SharePoint?

Email, calendars, mail flow, and Outlook clients.

• Adding a new domain to Microsoft 365 without email downtime
• BIMI and brand indicators in email
• Distribution lists vs Microsoft 365 Groups
• DMARC rollout from p=none to p=reject
• Exchange hybrid deployment
• Exchange Online anti-spam and anti-phishing
• Exchange Online archiving and litigation hold
• Exchange Online mail flow and connectors
• Exchange Online resource mailboxes
• Exchange transport rule examples
• How to convert a user mailbox to a shared mailbox
• How to put a mailbox on litigation hold
• How to set up DKIM for a custom domain in Microsoft 365
• Managing Outlook signatures at scale
• Migrating a shared mailbox to a distribution group, or back
• New Outlook vs classic Outlook on Windows
• Office 365 Message Encryption
• Office 365 Message Encryption deep dive
• Outlook cached mode and OST files
• Outlook calendar delegation
• Outlook Focused Inbox and the legacy Clutter folder
• Outlook mobile policies and app protection
• Outlook rules and automation
• Proxy addresses and email aliases in Exchange Online
• Retiring on-prem Exchange after a full migration
• Shared mailboxes explained
• What is Exchange Online?

Identity, authentication, Conditional Access, PIM, and governance.

• Adding a named location without breaking Conditional Access
• App consent policies and the admin consent workflow
• Assigning licenses with group-based licensing in Entra ID
• Cleaning up over-consented app permissions
• Cleaning up unused enterprise apps in Entra ID
• Compromised Microsoft 365 account response runbook
• Conditional Access break-glass account design
• Conditional Access for Microsoft 365 admin accounts
• Cross-Tenant Access Settings design
• Cross-tenant calendar sharing
• Cross-tenant synchronization in Entra ID
• Entitlement Management access packages
• Entra Connect vs Entra Cloud Sync
• Entra External ID vs Azure AD B2C
• Entra ID Administrative Units
• Entra ID app registrations and enterprise apps
• Entra ID authentication contexts
• Entra ID B2B guest access
• Entra ID Conditional Access design
• Entra ID custom roles
• Entra ID Governance explained
• Entra ID groups and group-based licensing
• Entra ID Lifecycle Workflows
• Entra ID Multi-Tenant Organizations
• Entra ID passwordless authentication
• Entra ID Privileged Identity Management
• Entra ID self-service password reset
• Entra ID vs Okta
• Entra ID vs Ping Identity
• Entra ID Workload Identities
• Entra Permissions Management
• How to block legacy authentication with Conditional Access
• How to bulk-assign Intune configuration profiles
• How to create a break-glass account in Entra ID
• How to enable self-service password reset in Entra ID
• How to require compliant devices with Conditional Access
• How to require MFA for all users with Conditional Access
• How to reset MFA for a user in Entra ID
• How to set up PIM for the Global Administrator role
• Hybrid identity strategy for Microsoft 365
• Investigating a suspicious sign-in with Entra sign-in logs
• Microsoft 365 service principal best practices
• Microsoft Entra Connect Health
• Microsoft Entra Global Secure Access
• Microsoft Entra ID Access Reviews
• Microsoft Entra ID Recommendations
• Microsoft Entra password protection
• Microsoft Entra Verified ID
• Migrating Entra Connect Sync to Cloud Sync without an outage
• PIM operational playbook
• Recovering from a broken Entra Connect Sync
• Retiring on-prem Active Directory: what still requires it
• Rotating an app registration secret without downtime
• SAML SSO with Entra ID
• SCIM provisioning to Entra ID
• Testing Conditional Access policies
• The Entra Suite explained
• Token protection and token theft in Microsoft 365

Defender XDR, Endpoint, Office 365, Identity, and Sentinel.

• Attack Simulation Training in Defender for Office 365
• Business Email Compromise response playbook
• Defender Attack Disruption
• Defender External Attack Surface Management
• Defender for Endpoint on Linux
• Defender for Endpoint on macOS
• Defender for Endpoint vs CrowdStrike
• Defender for Endpoint vs SentinelOne
• Defender for Office 365 quarantine workflow
• Defender Threat Intelligence
• Defender Vulnerability Management
• Defender XDR advanced hunting workshop
• Defender XDR and attack-surface management
• How to block a compromised account in Microsoft 365
• Investigating a phishing message that got past defences
• KQL primer for Defender XDR
• Microsoft 365 security and compliance
• Microsoft 365 security baselines
• Microsoft Defender Antivirus configuration
• Microsoft Defender Antivirus exclusions design
• Microsoft Defender for Business
• Microsoft Defender for Cloud Apps explained
• Microsoft Defender for Endpoint explained
• Microsoft Defender for Identity explained
• Microsoft Defender for Identity sensor deployment
• Microsoft Defender for IoT explained
• Microsoft Defender for Office 365 explained
• Microsoft Sentinel analytic rules
• Microsoft Sentinel cost optimisation
• Microsoft Sentinel for Microsoft 365
• Microsoft Sentinel onboarding
• Ransomware preparedness for Microsoft 365
• Which Microsoft Defender is which
• Zero trust in Microsoft 365

Labels, DLP, retention, eDiscovery, audit, and records management.

• Customer Key for Microsoft 365
• Customer Lockbox deep dive
• How to create a DLP policy in Microsoft Purview
• How to create a retention policy in Microsoft Purview
• How to publish sensitivity labels in Microsoft Purview
• How to search the audit log in Microsoft Purview
• Microsoft 365 audit log query patterns
• Microsoft Priva privacy management
• Microsoft Purview audit retention
• Microsoft Purview Compliance Manager
• Microsoft Purview Data Loss Prevention — a deep dive
• Microsoft Purview Data Map
• Microsoft Purview records management
• Microsoft Purview sensitivity labels — a deep dive
• Microsoft Service Trust Portal and compliance documentation
• Purview auto-labelling policies
• Purview Communication Compliance
• Purview eDiscovery — standard vs premium
• Purview Information Barriers
• Purview Insider Risk Management
• Purview retention policies explained
• Purview vs Netskope
• Purview vs Varonis
• What is Microsoft Purview?

Endpoint management, Autopilot, app deployment, mobile, and Cloud PC.

• Azure Virtual Desktop explained
• Configuration Manager co-management with Intune
• How to deploy a Win32 app with Intune
• How to register devices for Windows Autopilot
• How to remote wipe a lost device with Intune
• Intune and Android Enterprise
• Intune app deployment for Microsoft 365 Apps
• Intune app protection policies
• Intune baseline for Cloud PCs
• Intune compliance policies and Conditional Access
• Intune Endpoint Analytics
• Intune Endpoint Privilege Management
• Intune macOS management
• Intune scripts and proactive remediations
• Intune vs Jamf
• Intune vs Kandji
• Intune vs Workspace ONE
• Intune Win32 app deployment
• Intune Windows Autopilot
• Microsoft 365 Apps for Mac
• Microsoft 365 mobile device security
• Microsoft Tunnel for Intune
• Office Scripts in Excel
• Rebuilding Autopilot after an enrollment tenant change
• The Intune Suite explained
• The Office Deployment Tool deep dive
• Troubleshooting Microsoft 365 Apps activation
• Universal Print overview
• Windows 365 explained
• Windows 365 vs AVD: a real cost comparison
• Windows 365 vs Azure Virtual Desktop
• Windows Autopatch

Microsoft Viva, Loop, Bookings, Forms, Stream, Whiteboard, Planner.

• Microsoft Bookings advanced configuration
• Microsoft Bookings explained
• Microsoft Forms — surveys, quizzes, and polls
• Microsoft Forms: branching logic and quiz mode
• Microsoft Lists templates and patterns
• Microsoft Loop component patterns
• Microsoft Loop explained
• Microsoft Loop external sharing and governance
• Microsoft Loop workspaces deep dive
• Microsoft Mesh and immersive spaces in Teams
• Microsoft Places — workplace planning
• Microsoft Planner premium vs Project for the web
• Microsoft Planner, Tasks, and Project
• Microsoft Stream on SharePoint
• Microsoft Viva Amplify for internal communications
• Microsoft Viva Engage moderation
• Microsoft Viva Goals and OKRs after retirement
• Microsoft Viva Insights
• Microsoft Viva Learning
• Microsoft Viva overview
• Microsoft Whiteboard for hybrid workshops
• Microsoft Whiteboard in meetings and beyond
• Viva Engage vs Yammer
• Viva Learning and LinkedIn Learning integration

Microsoft Graph, SPFx, Office add-ins, custom apps, and integrations.

• Microsoft Graph API basics
• Microsoft Graph change notifications and webhooks
• Microsoft Graph delta queries
• Office add-ins development overview
• The Microsoft Graph PowerShell SDK

Migrations, M&A, multi-tenant, rebrands, and cross-tenant scenarios.

• Microsoft 365 after an acquisition
• Microsoft 365 Multi-Geo
• Microsoft 365 tenant rebranding
• Microsoft 365 tenant-to-tenant migration
• Microsoft 365 vs Google Workspace
• Microsoft 365 vs Microsoft 365 Government
• Microsoft 365 vs on-premises Office
• Migrating file shares to OneDrive and SharePoint
• Migrating from Google Workspace to Microsoft 365
• Migrating from on-premises Exchange to Microsoft 365
• Multi-language Microsoft 365 tenant setup

Plans, admin, governance, network, adoption, and strategy.

• Branding and customisation in Microsoft 365
• Building a Microsoft 365 Center of Excellence
• Building a Microsoft 365 strategy
• Business Premium vs Microsoft 365 E3
• Common DAX patterns in Power BI
• Continuous Access Evaluation explained
• Exchange Online Protection transport pipeline
• External collaboration in Microsoft 365, explained
• GitHub with Microsoft 365
• Handling licence-count overrun surprises
• How to offboard a user in Microsoft 365
• How to restore a deleted user in Microsoft 365
• Integrating Microsoft 365 with Dynamics 365
• Microsoft 365 admin center
• Microsoft 365 admin role design
• Microsoft 365 administrator roles
• Microsoft 365 Adoption Score
• Microsoft 365 Apps Cloud Policy
• Microsoft 365 backup and recovery
• Microsoft 365 Backup deep dive
• Microsoft 365 Backup partner ecosystem
• Microsoft 365 Business Premium deep dive
• Microsoft 365 capacity planning
• Microsoft 365 cost optimisation
• Microsoft 365 deployment rings and release channels
• Microsoft 365 dev/test tenant strategy
• Microsoft 365 disaster recovery planning
• Microsoft 365 documentation patterns
• Microsoft 365 domains and DNS setup
• Microsoft 365 E3 vs E5 — what's worth the upgrade
• Microsoft 365 Education tenants
• Microsoft 365 for enterprise
• Microsoft 365 for non-profits
• Microsoft 365 for small business
• Microsoft 365 Frontline plans deep dive
• Microsoft 365 governance framework
• Microsoft 365 Government cloud operations
• Microsoft 365 Group naming and expiration policies
• Microsoft 365 incident response runbook
• Microsoft 365 licensing models explained
• Microsoft 365 Lighthouse for MSPs
• Microsoft 365 monitoring and alerts
• Microsoft 365 network connectivity principles
• Microsoft 365 network performance tuning
• Microsoft 365 offboarding process
• Microsoft 365 onboarding new users
• Microsoft 365 plans and pricing
• Microsoft 365 reporting via PowerShell
• Microsoft 365 service health and Message Center
• Microsoft 365 tenant audit checklist
• Microsoft 365 tenant isolation and data residency
• Microsoft 365 training programs
• Microsoft Fabric explained
• Microsoft FastTrack
• Microsoft Intune and device management
• Microsoft Search administration
• Restoring a deleted Microsoft 365 group and its resources
• Running a Microsoft 365 champions network
• ServiceNow with Microsoft 365
• Setting up Microsoft 365 from scratch
• Teams Direct Routing local media optimisation
• The Microsoft 365 Roadmap and feature previews
• What is Microsoft 365?
• What is Microsoft Entra ID?
• Windows 11 25H2 and annual servicing explained
• Working effectively with Microsoft Support
• Working effectively with your Microsoft account team