tenant@msp:~/journal — bash

ls -la ./microsoft-365/

tenant@msp:~/journal find . -name "*.md" | sort -r
shared-mailbox-forwarding-after-offboarding.md -rw-r--r--

Where the Mail Goes After Someone Leaves

Converting a departed employee’s mailbox to a shared mailbox and forwarding it to a distribution group keeps their address alive without handing anyone a second inbox to monitor. Here’s the flow, the four steps, and the one setting to confirm before you close the ticket.

quarantine-policies-defender-office-365.md -rw-r--r--

Two Variables and a Trap: Quarantine Policies in Defender for Office 365

The three built-in quarantine policies differ on exactly two settings, and one of them is a silent ticket generator sitting in every tenant by default. Here’s the decision map, the override that ignores your permissions, and the PowerShell to audit it.

disable-chrome-password-manager-intune.md -rw-r--r--

Turning Off Chrome's Password Manager with Intune — and Why It's Not as Simple as a Toggle

Disabling Chrome’s built-in password manager through Intune’s settings catalog takes about a minute. Understanding what it actually does — and the two ways it quietly doesn’t do what people assume — is the part that saves you a ticket later.

teams-external-file-sharing-csteamsfilespolicy.md -rw-r--r--

The Missing Attach Button: External File Sharing in Teams and CsTeamsFilesPolicy

When a client says they can’t attach files to an external Teams chat, it usually isn’t broken — it’s working exactly as Microsoft intended. Here’s what’s really happening, and why the fix lives in PowerShell instead of the admin center.