Suppression rules may be edited to unintentionally suppress more alerts in the Microsoft Defender 365 portal

 User impact: Suppression rules may be edited to unintentionally suppress more alerts in the Microsoft Defender 365 portal.

  Current status: We've determined that a code regression is inadvertently causing edited suppression rules to unintentionally suppress more alerts in the Microsoft Defender 365 portal. In an attempt to prevent further impact, we've introduced validation logic which will prevent users from saving invalid rules which we suspect is causing impact. To further mitigate impact, we're working on a fix to address existing impact from rules already created that have suppressed other alerts. Scope of impact: Impact is specific to users who are served through the affected infrastructure. Root cause: A code regression is inadvertently causing edited suppression rules to unintentionally suppress more alerts in the Microsoft Defender 365 portal.

Golden rule - 12

 RTFM

Read documentation to the end before you do. Take a deep breath, grab a cup of coffee (or your preferred beverage), and dive into that documentation like a fearless adventurer. Trust me, it'll save you a ton of time and frustration in the long run.

Meaning:
Before asking for help or trying to troubleshoot a problem, read the official documentation or manuals for the product, system, or software. Most issues are already covered there.

Why it matters:

1. Saves time: Reduces trial-and-error and unnecessary support requests.

2. Builds knowledge: Helps you understand the system more deeply.

3. Encourages self-reliance: Strengthens problem-solving skills.

4. Reduces mistakes: Prevents misconfiguration or misuse of systems.

5. Improves efficiency: You can implement solutions faster with documented guidance.

Key Practices:

• Always check the official docs first (vendor manuals, knowledge bases, internal guides).

• Search for FAQs and troubleshooting sections before experimenting.

• Keep a personal reference of useful guides for quick access.

• Combine reading with testing—understand concepts, then try them safely.

Friendly Reminder:

RTFM doesn’t mean “don’t ask for help” — it means do your homework first, so when you do need help, the question is informed and precise.

How To Use Check Fish Scanner -An AI-powered scanner that analyzes the safety of URLs right from your inbox.

 

How To Use Check Fish Scanner

CheckPhish Scanner for Outlook is an AI-powered scanner that analyzes the safety of URLs right from your inbox.

Find your add-in under Home tab > Get Add-ins > Admin-managed > CheckPhish Scanner for Outlook

Right now it is implemented in few computers, once it will be implementen in all Teams Transport organization, you will receive email ( please see picture)

Once Check Phish Scanner plug in implemented in your cmpuer ( it will be unatendet implementation) you need manualy click on fish icon, to scan suspecious email.

Scan done per one email that you choose to scan, in your mailbox. It wont work in shared mailboxes.

5-minute wait when you power cycle Fiber Optic router

Apparently, there are fiber optic routers out there that require a 5-minute wait when you powercycle them.  Crazy, right? Always something new to discover in the world of technology.

"Hard match" for ADConnect

 

 

 

 

 

"Hard match" for ADConnect

 

 

On user properties  go down and find On-premises immutable ID (in this case is

QOqq1+9+7ESYAJc+xpRKAA==) of account that will be deleted.

 

Then collect Object ID from user that will stay

 

Pause synchronization by opening  Azure AD connect application

Delete 2 times user duplicate ( with no files attached)

Verify msds consistansy is not empty

 

 

If it empty  use object Duig to paste it to ms ds

 

 

 

Make sure user deleted twice ( from deleted users as well)

In case its not installed ( not Active directory teamstransport case)

install-module azuread

install-module msonline

 

 

 

Run only if session ended  ( computer restarted)

connect-azuread

 

connect-msolservice

 

 Set-AzureADUser -objectID XXXXXXX -ImmutableId XXXXXXX

Object ID its “good user” , and Immutebleld ID its from deleted user, replace and run sync

 

 

 

Set-AzureADUser -objectID 6215c50a-242a-4723-89aa-xxxxxxxxxxxx -ImmutableId LBWfMzBWxxxxxxxxxfaWSILpw==

 

 

Start-ADSyncSyncCycle Delta

Run Synchronization Service Manage  to monitor synchronization

Change number of monitors at Remote Desktop session

The connection settings are saved to a hidden RDP file in the Documents folder by default. So, you can also open this file with a text editor and directly edit the values there to set up the multi monitor remote connection. Here are the steps to do so:

1. Navigate to the Documents folder and make sure Show hidden items is enabled.
   
2. Open the RDP file with a text editor, add the following line, and then save the file:
   use multimon:i:1
   
3. If the display order is incorrect, execute the mstsc /l command in CMD to view all the monitors on your system. They’ll be listed as 0, 1, 2, and so on.
   
4. Next, you can adjust the values for the selectedmonitors line to rearrange the monitors in the correct order.
5. For instance, if you have 3 monitors listed as selectedmonitors:s:0,1,2, you could edit it to selectedmonitors:s:1,2,0 to change the display order, or selectedmonitors:s:0,2 to use 2 of 3 monitors.
6. Remember to save the settings once you figure out the correct order.

Golden rule -11

 Updates are important!

Although there are occasions when updates cause a new problem to appear, generally speaking, they “help” more than they “hurt”. Not only do updates fix known bugs in software and operating systems, but they plug critical security holes that could potentially cause harm.