Microsoft 365 Admin

Running Microsoft 365 for a small business: tenant setup, licensing, security, updates and the admin work nobody sees.

This is where I write down the admin side of Microsoft 365: the settings, decisions and mistakes behind keeping a small Microsoft 365 environment running. Much of it comes from my work in IT support for small businesses, where there’s no IT department and one person looks after the whole tenant. I write it down mostly so I don’t have to relearn it next time, and in case it saves you the same trouble.

What you’ll find here:

  • Setting up and licensing a tenant: from a brand-new tenant to choosing between Business Basic, Standard and Premium.
  • Security without locking yourself out: Conditional Access, MFA and the other settings that matter most in a small tenant.
  • Updates and Patch Tuesday: a short heads-up on the Monday before every Patch Tuesday, and why ring-based deployment beats updating everything at once.
  • Devices and Intune: including notes from the MD-102 exam.
  • Email, retention and Copilot: migrating mail without surprises, why retention isn’t backup, and why Copilot administration is becoming its own discipline.

From February 2027 there’s also a series, Microsoft 365 for a small business, that goes through it step by step: a new tenant, licences, Conditional Access, email migration and retention.

October 2026 for Microsoft admins: what changed on the 1st, and what ends on Patch Tuesday

October 2026 for Microsoft admins: what changed on the 1st, and what ends on Patch Tuesday

last modified by Jan Holbo Rasmussen

Note

Updated 13 October 2026, after the release. This post went out the day before Patch Tuesday. It now says what actually shipped: 1,411 fixes, one of them for a flaw that is already being used in attacks, and one known issue with USB audio. The other sections are brought up to date as well.

Patch Tuesday was on 13 October, and this one was more than a batch of fixes. Several products got their last update on the same day, three things had already changed on 1 October, and a Secure Boot certificate expires six days later. Here is the month as a list, with what to check for each.

Read article →
Windows 11 24H2 gets its last update on 13 October, and Windows 10 gets another year

Windows 11 24H2 gets its last update on 13 October, and Windows 10 gets another year

by Jan Holbo Rasmussen

Two Windows dates have been mixed together in a lot of headlines this autumn, so here they are, separated.

  • Windows 11, version 24H2, Home and Pro: the last update comes on Tuesday 13 October 2026 [1].
  • Windows 10: nothing ends this month. The extended security updates for home users, which were supposed to stop now, run until 12 October 2027 [2].

Windows 11 24H2: update to a newer version

Each yearly version of Windows 11 is only maintained for a limited time. For Home and Pro that is two years, and 24H2 came out on 1 October 2024 [1]. After 13 October, a PC that is still on 24H2 gets no more security fixes.

Read article →
Office 2021 support ends on 13 October: what are your options?

Office 2021 support ends on 13 October: what are your options?

by Jan Holbo Rasmussen

On Tuesday 13 October 2026, Office 2021 gets its last update. That goes for the version you bought in a shop and for Office LTSC 2021, the version organisations buy through volume licensing [1] [2]. Microsoft leaves no opening: “there will be no extension and no extended security updates” [1].

What end of support means

Word and Excel will start on 14 October exactly as they did the day before. “All of your Office 2021 apps may continue to function. However, you could expose yourself to serious and potentially harmful security risks.” [1]

Read article →
Teams and Copilot are moving to cloud.microsoft: check your allow-lists before October

Teams and Copilot are moving to cloud.microsoft: check your allow-lists before October

by Jan Holbo Rasmussen

Two of the most used Microsoft 365 web addresses are changing this autumn. Copilot is moving to copilot.cloud.microsoft and Teams on the web to teams.cloud.microsoft. If something in your network blocks *.cloud.microsoft, October is when your users find out.

What’s changing

Copilot: m365.cloud.microsoft becomes copilot.cloud.microsoft

In message center post MC1462915 Microsoft says it started redirecting users from m365.cloud.microsoft to copilot.cloud.microsoft in early September, in organisations where the new address is reachable. Everyone else gets redirected in early October [1]. If the address is blocked, the redirect happens anyway, and “affected users may be unable to use Copilot in the web app, desktop app, and Microsoft Edge experience” [1].

Read article →
September 2026 Patch Tuesday broke Excel: the case for ring-based deployment

September 2026 Patch Tuesday broke Excel: the case for ring-based deployment

by Jan Holbo Rasmussen

September’s Patch Tuesday was the biggest Microsoft has ever shipped, and one of the updates in it broke copy and paste in Excel. Together they make a good argument for something small IT departments often skip: letting a few people get the updates first.

What shipped on 8 September 2026

A record count, however you count it

How big depends on who you ask. BleepingComputer counted 966 vulnerabilities [1], Tenable 964 [2], the Zero Day Initiative 972 new Microsoft CVEs [3] and SecurityWeek 974 [4]. When I first noted the idea for this post I wrote down 973, which is roughly what you get from reading enough headlines.

Read article →