Documentation station
Knowledge base
Conditional Access basics
How to tell a policy block from an authentication failure, how to use What If, and why excluding a user is never the fix.
Escalating an incident
When several tickets are one problem, how to size it, and what a useful escalation contains.
Group-based licensing
How licences are assigned by group, the errors that silently prevent it, and why a direct licence is the wrong workaround.
Guest access and external collaboration
Why an invitation to one firm works and another silently fails, and why the fix is a change request rather than a setting you flip.
Intune device compliance
Reading a non-compliant device, the settings that most often fail, and the propagation delays that make people think a fix did not work.
Mailbox quotas and archiving
The three quota thresholds, why receiving keeps working after sending stops, and how to solve it once instead of annually.
Microsoft Entra Connect health
What stops flowing when directory sync stops, how to recognise it from single-user tickets, and why it is an incident.
New starter checklist
What must be true before a first day works, and how to triage a starter who is missing one piece.
OneDrive Files On-Demand and local disk space
Cloud quota is not disk space. How pinned content fills a laptop, stops sync, and strands unsaved work.
OneDrive and SharePoint recycle bins
The two-stage recycle bin, how long you really have, and where files go that nobody deleted.
Quarantine, SPF, DKIM and DMARC
Why legitimate mail gets held, how to tell a false positive from a real threat, and why a domain allow entry is usually the wrong fix.
Reading sign-in failure codes (AADSTS)
What the common Microsoft Entra sign-in error codes mean and which half of the sign-in each one points at.
Reset a user's MFA registration
When to require re-registration, how to do it safely, and why a password reset is not a substitute.
Responding to a compromised account
Containment order, what a password reset alone does not do, and the places attackers hide.
Running a message trace
How to prove whether a message existed, where it stopped, and who actually received it.
SharePoint permission inheritance
Why one library denies access while the rest of the site works, and how to fix it without widening access.
Shared mailboxes and auto-mapping
Why a shared mailbox opens on the web but never appears in desktop Outlook, and how to grant access so it does.
Sharing and least privilege
Granting the narrowest access that solves the problem, and why the shortcuts are worse than the ticket.
Triaging a reported phishing message
What to check, what to preserve, and what to do in the first ten minutes when a user reports a suspicious email.
Troubleshooting an Outlook profile
When a client-side rebuild is genuinely the answer, and the far more common cases where it is expensive damage.
Verifying a caller's identity
The identity check that has to happen before any account action, and why social engineering targets exactly this step.
Where Teams meeting recordings are stored
Which drive a recording lands on, why it disappears after a few months, and how to get it back.