Credentials Microsoft Certified Trainer (MCT) 2026Microsoft Innovative Educator Expert 2025–2026Microsoft Elevate Educator Expert 2026–2027ISC2 Certified Information Systems Security Professional (CISSP)Microsoft 365 Certified: Enterprise Administrator Expert (MS-102)Microsoft Certified: Azure Solutions Architect Expert (AZ-305)PMI Project Management Professional (PMP) 28 certifications · see all Verify on Credly
Omer EltayebMicrosoft 365
LinkedIn
Microsoft 365 error library

Entra ID, Defender, Exchange Online and Microsoft 365 errors — and how to fix them

Search 169 error codes and messages from 88 guides for Microsoft Entra ID, Microsoft Defender, Exchange Online and Microsoft 365 — AADSTS sign-in errors, Conditional Access blocks, Entra Connect sync errors, Defender onboarding and sensor errors, Exchange Online NDRs and licensing errors. Paste the code or message you see and open the guide that fixes it.

Exchange Server error library (701) Intune error library (602) Configuration Manager error library (70) Download all as CSVJSON

Area

Showing all 169 errors

Entra ID

Sign-in and AADSTS errors, Conditional Access, Entra Connect sync, device registration and hybrid identity

81
0x801c001ddsregcmd /status (Client ErrorCode)Troubleshooting Microsoft Entra hybrid join with dsregcmd /status 0x801c03f2dsregcmd /status (Client ErrorCode)Troubleshooting Microsoft Entra hybrid join with dsregcmd /status 0x801c0021 / 0x80072ee2dsregcmd /status (Client ErrorCode)Troubleshooting Microsoft Entra hybrid join with dsregcmd /status 0x80090016dsregcmd /status (Client ErrorCode)Troubleshooting Microsoft Entra hybrid join with dsregcmd /status 0xc000006ddsregcmd /status (Attempt Status)Primary Refresh Token (PRT) explained: fixing SSO and repeated sign-in prompts 0xE0474352Entra Connect Sync setup (2.6.84.0)Keeping Microsoft Entra Connect Sync supported: versions, auto-upgrade, in-place upgrades 1002 No Microsoft Entra device stateMicrosoft Entra sign-in log (token protection)Token protection in Conditional Access: binding sign-in sessions to the device 1003 Device state doesn't meet requirementsMicrosoft Entra sign-in log (token protection)Token protection in Conditional Access: binding sign-in sessions to the device 1004 Apple: registration isn't hardware-backedMicrosoft Entra sign-in log (token protection)Token protection in Conditional Access: binding sign-in sessions to the device 1006 OS version unsupportedMicrosoft Entra sign-in log (token protection)Token protection in Conditional Access: binding sign-in sessions to the device 1008 Client isn't using the platform broker (WAM or the SSO plug-in)Microsoft Entra sign-in log (token protection)Token protection in Conditional Access: binding sign-in sessions to the device 12002 / 12007 / 12029 / 12030 (WinHTTP)dsregcmd /status (SSO State)Primary Refresh Token (PRT) explained: fixing SSO and repeated sign-in prompts 50053Microsoft Entra sign-in logReading Microsoft Entra sign-in logs like an engineer 50058Microsoft Entra sign-in logReading Microsoft Entra sign-in logs like an engineer 50126Microsoft Entra sign-in logReading Microsoft Entra sign-in logs like an engineer 50140 / 50074 / 50125 / 50199Microsoft Entra sign-in log (Interrupted)Reading Microsoft Entra sign-in logs like an engineer 70043 / 70046Microsoft Entra sign-in logReading Microsoft Entra sign-in logs like an engineer 81001Microsoft Entra sign-in logSeamless SSO not working: the AZUREADSSOACC account, Kerberos and the intranet zone 81002 / 81003 / 81008 / 81009Microsoft Entra sign-in logSeamless SSO not working: the AZUREADSSOACC account, Kerberos and the intranet zone 81004Microsoft Entra sign-in logSeamless SSO not working: the AZUREADSSOACC account, Kerberos and the intranet zone 81010Microsoft Entra sign-in logSeamless SSO not working: the AZUREADSSOACC account, Kerberos and the intranet zone 81011 / 81013Microsoft Entra sign-in logSeamless SSO not working: the AZUREADSSOACC account, Kerberos and the intranet zone 81012Microsoft Entra sign-in logSeamless SSO not working: the AZUREADSSOACC account, Kerberos and the intranet zone 500121Microsoft Entra sign-in logReading Microsoft Entra sign-in logs like an engineer AADSTS50034 / 0xc000005fdsregcmd /status (SSO State)Primary Refresh Token (PRT) explained: fixing SSO and repeated sign-in prompts AADSTS50053Sign-in page / Microsoft Entra sign-in logMicrosoft Entra ID Protection: risk policies, self-remediation and false positives AADSTS50072 UserStrongAuthEnrollmentRequiredInterruptMicrosoft Entra sign-in logAADSTS50076, AADSTS50079 and AADSTS50158: fixing MFA and authentication-strength sign-in errors AADSTS50074 UserStrongAuthClientAuthNRequiredInterruptMicrosoft Entra sign-in logAADSTS50076, AADSTS50079 and AADSTS50158: fixing MFA and authentication-strength sign-in errors AADSTS50076 UserStrongAuthClientAuthNRequiredMicrosoft Entra sign-in logAADSTS50076, AADSTS50079 and AADSTS50158: fixing MFA and authentication-strength sign-in errors AADSTS50078 UserStrongAuthExpiredMicrosoft Entra sign-in logAADSTS50076, AADSTS50079 and AADSTS50158: fixing MFA and authentication-strength sign-in errors AADSTS50079 UserStrongAuthEnrollmentRequiredMicrosoft Entra sign-in logAADSTS50076, AADSTS50079 and AADSTS50158: fixing MFA and authentication-strength sign-in errors AADSTS50126: Error validating credentials due to invalid username or password.dsregcmd /status (SSO State)Primary Refresh Token (PRT) explained: fixing SSO and repeated sign-in prompts AADSTS50155dsregcmd /status (SSO State)Primary Refresh Token (PRT) explained: fixing SSO and repeated sign-in prompts AADSTS50158 ExternalSecurityChallengeMicrosoft Entra sign-in logAADSTS50076, AADSTS50079 and AADSTS50158: fixing MFA and authentication-strength sign-in errors AADSTS53000 DeviceNotCompliantSign-in page / Microsoft Entra sign-in logAADSTS53000 vs AADSTS53003: troubleshooting Conditional Access sign-in blocks AADSTS53001Sign-in page / Microsoft Entra sign-in logTroubleshooting Microsoft Entra hybrid join with dsregcmd /status AADSTS53001 DeviceNotDomainJoinedSign-in page / Microsoft Entra sign-in logAADSTS53000 vs AADSTS53003: troubleshooting Conditional Access sign-in blocks AADSTS53003 BlockedByConditionalAccessSign-in page / Microsoft Entra sign-in logAADSTS53000 vs AADSTS53003: troubleshooting Conditional Access sign-in blocks AADSTS53004Microsoft Entra sign-in logA Conditional Access baseline: the first policies every tenant should deploy AADSTS53004 ProofUpBlockedDueToRiskMicrosoft Entra sign-in logAADSTS50076, AADSTS50079 and AADSTS50158: fixing MFA and authentication-strength sign-in errors AttributeValueMustBeUniqueSynchronization Service ManagerEntra Connect sync errors: duplicates, InvalidSoftMatch and objects that never sync AzureAdPrt : NO AcquirePrtDiagnostics : PRESENTdsregcmd /status (SSO State)Primary Refresh Token (PRT) explained: fixing SSO and repeated sign-in prompts completed-export-errorsSynchronization Service Manager (export run)Entra Connect sync errors: duplicates, InvalidSoftMatch and objects that never sync Connection to Microsoft Entra ID failed due to authentication failureMicrosoft Entra Connect HealthMicrosoft Entra Connect Health: installing the agents and acting on sync alerts Device is either disabled or deleteddsregcmd /status (DeviceAuthStatus)Troubleshooting Microsoft Entra hybrid join with dsregcmd /status DomainJoined : YES but AzureAdJoined : NOdsregcmd /statusTroubleshooting Microsoft Entra hybrid join with dsregcmd /status Event ID 304 / 305 / 307 (User Device Registration)Event Viewer (User Device Registration Admin)Troubleshooting Microsoft Entra hybrid join with dsregcmd /status Event ID 1081 (AAD)Event Viewer (AAD Operational)Primary Refresh Token (PRT) explained: fixing SSO and repeated sign-in prompts Event ID 1088 (AAD)Event Viewer (AAD Operational)Primary Refresh Token (PRT) explained: fixing SSO and repeated sign-in prompts Event ID 6329 (ADSync): 0x80230619Application log (Entra Connect server)Self-service password reset and password writeback: fixing the usual failures Event ID 32002 / 32009 (PasswordResetService)Application log (Entra Connect server)Self-service password reset and password writeback: fixing the usual failures Event ID 33004 / 33005 / 33006 / 33008 (PasswordResetService)Application log (Entra Connect server)Self-service password reset and password writeback: fixing the usual failures Existing Admin Role ConflictSynchronization Service ManagerEntra Connect sync errors: duplicates, InvalidSoftMatch and objects that never sync Export to Microsoft Entra ID was Stopped. Accidental delete threshold was reachedMicrosoft Entra Connect HealthMicrosoft Entra Connect Health: installing the agents and acting on sync alerts FileLoadException for System.Diagnostics.DiagnosticSourceSync cycle after a Connect Sync upgradeKeeping Microsoft Entra Connect Sync supported: versions, auto-upgrade, in-place upgrades Health Service data is not up to dateMicrosoft Entra Connect HealthMicrosoft Entra Connect Health: installing the agents and acting on sync alerts IdentityDataValidationFailed / DataValidationFailedSynchronization Service ManagerEntra Connect sync errors: duplicates, InvalidSoftMatch and objects that never sync InvalidHardMatchSynchronization Service ManagerEntra Connect sync errors: duplicates, InvalidSoftMatch and objects that never sync InvalidSoftMatchSynchronization Service ManagerEntra Connect sync errors: duplicates, InvalidSoftMatch and objects that never sync LargeObject / ExceededAllowedLengthSynchronization Service ManagerEntra Connect sync errors: duplicates, InvalidSoftMatch and objects that never sync ObjectTypeMismatchSynchronization Service ManagerEntra Connect sync errors: duplicates, InvalidSoftMatch and objects that never sync Password Hash Synchronization has stopped workingMicrosoft Entra Connect HealthMicrosoft Entra Connect Health: installing the agents and acting on sync alerts Report-only: FailureMicrosoft Entra sign-in log (Report-only tab)Test before you enforce: Conditional Access What If and report-only mode Report-only: User action requiredMicrosoft Entra sign-in log (Report-only tab)Test before you enforce: Conditional Access What If and report-only mode reportOnlyFailureLog Analytics (SigninLogs)Test before you enforce: Conditional Access What If and report-only mode reportOnlyInterruptedLog Analytics (SigninLogs)Test before you enforce: Conditional Access What If and report-only mode Roles are being assigned outside of Privileged Identity ManagementPrivileged Identity Management alertsPrivileged Identity Management: just-in-time Microsoft Entra roles done properly Sign-in was blocked by built-in protections due to high confidence of riskMicrosoft Entra sign-in logMicrosoft Entra ID Protection: risk policies, self-remediation and false positives SSPR_0013SSPR portal (aka.ms/sspr)Self-service password reset and password writeback: fixing the usual failures SSPR_0014SSPR portal (aka.ms/sspr)Self-service password reset and password writeback: fixing the usual failures SSPR_0029SSPR portal (aka.ms/sspr)Self-service password reset and password writeback: fixing the usual failures SSPR_0030SSPR portal (aka.ms/sspr)Self-service password reset and password writeback: fixing the usual failures stopped-deletion-threshold-exceededSynchronization Service Manager (export run)Filtering Microsoft Entra Connect Sync by OU, group and attribute without deleting users The passkey already existsMicrosoft Authenticator (passkey registration)Rolling out passkeys in Microsoft Authenticator: policy, registration and the errors users hit The sync service isn't runningMicrosoft Entra Connect HealthMicrosoft Entra Connect Health: installing the agents and acting on sync alerts There are too many Global AdministratorsPrivileged Identity Management alertsPrivileged Identity Management: just-in-time Microsoft Entra roles done properly Unfamiliar sign-in propertiesID Protection risk detectionsMicrosoft Entra ID Protection: risk policies, self-remediation and false positives WorkplaceJoined : YES in User Statedsregcmd /status on a hybrid joined PCDual state, Pending and duplicate device objects in Microsoft Entra ID: a clean-up guide You can't get there from hereSign-in pageDual state, Pending and duplicate device objects in Microsoft Entra ID: a clean-up guide Your administrator has not enabled you to use this featureSSPR portal (aka.ms/sspr)Self-service password reset and password writeback: fixing the usual failures Your organization has deleted the deviceWindows / Office sign-in promptDual state, Pending and duplicate device objects in Microsoft Entra ID: a clean-up guide

Exchange Online

NDRs, mail flow, connectors, message trace and mailbox management

24
5.7.60 Client doesn't have permissions to send as this senderSMTP response (device or app log)Printers and apps can't send via Microsoft 365: SMTP AUTH, relay connectors and 5.7.57 530 5.7.57 SMTP; Client was not authenticated to send anonymous mail during MAIL FROMSMTP response (device or app log)Printers and apps can't send via Microsoft 365: SMTP AUTH, relay connectors and 5.7.57 535 5.7.139 Authentication unsuccessful, basic authentication is disabledSMTP response (device or app log)Printers and apps can't send via Microsoft 365: SMTP AUTH, relay connectors and 5.7.57 550 5.4.1 Recipient address rejected: Access denied. AS(201806281)NDRNDR 550 5.4.1 “Recipient address rejected: Access denied”: Directory-Based Edge Blocking 550 5.7.57 Client not authenticated to send mail. Error: 535 5.7.139 Authentication unsuccessful, basic authentication is disabledSMTP response (device or app log)Printers and apps can't send via Microsoft 365: SMTP AUTH, relay connectors and 5.7.57 550 5.7.520 Access denied, Your organization does not allow external forwarding.NDRNDR 550 5.7.520: fixing “Your organization does not allow external forwarding” 554 5.2.2 mailbox full; STOREDRV.Deliver.Exception:QuotaExceededException.MapiExceptionQuotaExceededNDR (diagnostic information for admins)“Mailbox full” in Exchange Online: quotas, Recoverable Items and the 554 5.2.2 NDR AS(7555)NDRNDR 550 5.7.520: fixing “Your organization does not allow external forwarding” CAT:BULK with SRV:BULKMessage header (X-Forefront-Antispam-Report)Legitimate email landing in Junk: how EOP decides and the right way to fix it CAT:PHSH / CAT:HPHSH / CAT:SPOOFMessage header (X-Forefront-Antispam-Report)Legitimate email landing in Junk: how EOP decides and the right way to fix it CAT:SPM / CAT:HSPMMessage header (X-Forefront-Antispam-Report)Legitimate email landing in Junk: how EOP decides and the right way to fix it compauth=fail reason=001Message header (Authentication-Results)Legitimate email landing in Junk: how EOP decides and the right way to fix it Creation of forwarding/redirect ruleMicrosoft Defender portal (alert)Investigating a compromised Exchange Online mailbox: rules, forwarding, sign-ins and audit permerrorSPF result (Authentication-Results header)SPF, DKIM and DMARC for your Microsoft 365 custom domain: a practical setup guide reason=000Message header (Authentication-Results)Legitimate email landing in Junk: how EOP decides and the right way to fix it SFTY:9.19 or 9.20Message header (X-Forefront-Antispam-Report)Legitimate email landing in Junk: how EOP decides and the right way to fix it SFV:BLK / SFV:SKBMessage header (X-Forefront-Antispam-Report)Legitimate email landing in Junk: how EOP decides and the right way to fix it SFV:SPMMessage header (X-Forefront-Antispam-Report)Legitimate email landing in Junk: how EOP decides and the right way to fix it Something went wrong and Outlook couldn't set up your accountOutlook (add account)Outlook can't connect or set up the account: Autodiscover troubleshooting for Exchange Online Suspicious email forwarding activityMicrosoft Defender portal (alert)Investigating a compromised Exchange Online mailbox: rules, forwarding, sign-ins and audit The action couldn't be completedOutlook on the web (when deleting items)“Mailbox full” in Exchange Online: quotas, Recoverable Items and the 554 5.2.2 NDR The message store has reached its maximum sizeOutlook (when deleting items)“Mailbox full” in Exchange Online: quotas, Recoverable Items and the 554 5.2.2 NDR The recipient's mailbox is full and can't accept messages now. Please try resending this message later or contact the recipient directly.NDR (user-facing text)“Mailbox full” in Exchange Online: quotas, Recoverable Items and the 554 5.2.2 NDR User restricted from sending emailMicrosoft Defender portal (alert)Investigating a compromised Exchange Online mailbox: rules, forwarding, sign-ins and audit

Defender

Defender for Endpoint, Defender for Office 365, Defender XDR and Defender for Identity

56
0x87D1FDE8Intune admin center (EDR policy status)Defender for Endpoint onboarding failures: SENSE event IDs, script errors and what they mean 0x87D1FDE8 (remediation failed)Intune EDR policy (onboarding setting)Onboarding Windows devices to Defender for Endpoint with Intune (and proving it worked) 0x87D101A9Intune EDR policy (device status)Onboarding Windows devices to Defender for Endpoint with Intune (and proving it worked) 0x87D101A9Intune admin center (EDR policy status)Defender for Endpoint onboarding failures: SENSE event IDs, script errors and what they mean AsrOfficeChildProcessAuditedAdvanced hunting (DeviceEvents)Rolling out ASR rules safely: audit mode, exclusions and advanced hunting Blocked by tenant adminURL protection report (click action)Safe Links and Safe Attachments: troubleshooting blocked links, missing rewrites and delays CasbPolicyAdvanced hunting (ResponseCategory)Web content filtering in Defender for Endpoint: network protection, categories and indicators compauth=failMessage header (Authentication-Results)Handling false-positive quarantined email in Defender for Office 365 the right way Connection blockedWindows toast (network protection)Web content filtering in Defender for Endpoint: network protection, categories and indicators CustomPolicyAdvanced hunting (ResponseCategory)Web content filtering in Defender for Endpoint: network protection, categories and indicators Device is managed by SCCM AgentMDE Enrollment status (code 4)Security settings management enrollment errors: decoding SenseCM EnrollmentStatus codes Device is not enrolled and has never been enrolledMDE Enrollment status (code 2)Security settings management enrollment errors: decoding SenseCM EnrollmentStatus codes Directory services user credentials are incorrectDefender portal (Global health issues)Defender for Identity sensors: installation and health issues on domain controllers Event ID 4 (SENSE)Event Viewer (Microsoft-Windows-SENSE)Moving Defender for Endpoint to streamlined connectivity: URLs, proxies and validation Event ID 5 (SENSE)Event Viewer (Microsoft-Windows-SENSE)Onboarding Windows devices to Defender for Endpoint with Intune (and proving it worked) Event ID 5 (SENSE)Event Viewer (Microsoft-Windows-SENSE)Device shows "Inactive" or "No sensor data" in Microsoft Defender: how to troubleshoot Event ID 5 (SENSE)Event Viewer (Microsoft-Windows-SENSE)Defender for Endpoint onboarding failures: SENSE event IDs, script errors and what they mean Event ID 5 (SENSE)Event Viewer (Microsoft-Windows-SENSE)Moving Defender for Endpoint to streamlined connectivity: URLs, proxies and validation Event ID 6 (SENSE)Event Viewer (Microsoft-Windows-SENSE)Defender for Endpoint onboarding failures: SENSE event IDs, script errors and what they mean Event ID 7 (SENSE)Event Viewer (Microsoft-Windows-SENSE)Defender for Endpoint onboarding failures: SENSE event IDs, script errors and what they mean Event ID 15 (SENSE)Event Viewer (Microsoft-Windows-SENSE)Onboarding Windows devices to Defender for Endpoint with Intune (and proving it worked) Event ID 15 (SENSE)Event Viewer (Microsoft-Windows-SENSE)Device shows "Inactive" or "No sensor data" in Microsoft Defender: how to troubleshoot Event ID 15 (SENSE)Event Viewer (Microsoft-Windows-SENSE)Defender for Endpoint onboarding failures: SENSE event IDs, script errors and what they mean Event ID 15 (WDATPOnboarding)Event Viewer (Application log)Defender for Endpoint onboarding failures: SENSE event IDs, script errors and what they mean Event ID 30 (WDATPOnboarding)Event Viewer (Application log)Defender for Endpoint onboarding failures: SENSE event IDs, script errors and what they mean Event ID 1121 (Windows Defender)Event Viewer (Windows Defender/Operational)Rolling out ASR rules safely: audit mode, exclusions and advanced hunting Event ID 1122 (Windows Defender)Event Viewer (Windows Defender/Operational)Rolling out ASR rules safely: audit mode, exclusions and advanced hunting Event ID 1125 (Windows Defender)Event Viewer (Windows Defender/Operational)Web content filtering in Defender for Endpoint: network protection, categories and indicators Event ID 1126 (Windows Defender)Event Viewer (Windows Defender/Operational)Web content filtering in Defender for Endpoint: network protection, categories and indicators Event ID 1129 (Windows Defender)Event Viewer (Windows Defender/Operational)Rolling out ASR rules safely: audit mode, exclusions and advanced hunting Event ID 5007 (Windows Defender)Event Viewer (Windows Defender/Operational)Rolling out ASR rules safely: audit mode, exclusions and advanced hunting Event ID 5007 (Windows Defender)Event Viewer (Windows Defender/Operational)Defender Antivirus settings not applying from Intune: a troubleshooting checklist Event ID 5013 (Windows Defender)Event Viewer (Windows Defender/Operational)Defender Antivirus settings not applying from Intune: a troubleshooting checklist Event ID 5013 (Windows Defender)Event Viewer (Windows Defender/Operational)Tamper protection and Intune: why a Defender setting won't change, and how to fix it ExploitGuardNetworkProtectionBlockedAdvanced hunting (DeviceEvents ActionType)Web content filtering in Defender for Endpoint: network protection, categories and indicators ExploitGuardNetworkProtectionBlockedAdvanced hunting (DeviceEvents)Shadow IT with Defender for Cloud Apps and Defender for Endpoint: discover, warn, block General Hybrid join failureMDE Enrollment status (codes 10, 42)Security settings management enrollment errors: decoding SenseCM EnrollmentStatus codes Hybrid error - Service Connection PointMDE Enrollment status (codes 16, 17)Security settings management enrollment errors: decoding SenseCM EnrollmentStatus codes Microsoft Entra Connect misconfigurationMDE Enrollment status (codes 36, 37)Security settings management enrollment errors: decoding SenseCM EnrollmentStatus codes Microsoft Intune Configuration issueMDE Enrollment status (codes 8, 44)Security settings management enrollment errors: decoding SenseCM EnrollmentStatus codes Misconfigured: Impaired communicationsMicrosoft Defender portal (Sensor health state)Device shows "Inactive" or "No sensor data" in Microsoft Defender: how to troubleshoot Misconfigured: No sensor dataMicrosoft Defender portal (Sensor health state)Device shows "Inactive" or "No sensor data" in Microsoft Defender: how to troubleshoot No license foundMicrosoft Defender app on macOSOnboarding macOS to Defender for Endpoint with Intune: profiles, app and onboarding package NTLM Auditing is not enabledDefender portal (Identities › Health issues)Defender for Identity sensors: installation and health issues on domain controllers Power mode isn't configured for optimal processor performanceDefender portal (Identities › Health issues)Defender for Identity sensors: installation and health issues on domain controllers RemovableStoragePolicyTriggeredAdvanced hunting (DeviceEvents)Controlling USB and removable storage with Defender device control and Intune Sensor has issues with packet capturing componentDefender portal (Identities › Health issues)Defender for Identity sensors: installation and health issues on domain controllers Sensor reached a memory resource limitDefender portal (Identities › Health issues)Defender for Identity sensors: installation and health issues on domain controllers Sensor service failed to startDefender portal (Identities › Health issues)Defender for Identity sensors: installation and health issues on domain controllers Sensor stopped communicatingDefender portal (Identities › Health issues)Defender for Identity sensors: installation and health issues on domain controllers Sensor v3.x RPC Audit MisconfiguredDefender portal (Identities › Health issues)Defender for Identity sensors: installation and health issues on domain controllers SmartScreenUrlWarningAdvanced hunting (DeviceEvents)Shadow IT with Defender for Cloud Apps and Defender for Endpoint: discover, warn, block TamperingAttemptAdvanced hunting (DeviceEvents)Tamper protection and Intune: why a Defender setting won't change, and how to fix it Tenant mismatchMDE Enrollment status (code 15)Security settings management enrollment errors: decoding SenseCM EnrollmentStatus codes This content is blockedWindows toast (network protection)Web content filtering in Defender for Endpoint: network protection, categories and indicators this website has been classified as maliciousSafe Links warning pageSafe Links and Safe Attachments: troubleshooting blocked links, missing rewrites and delays

Microsoft 365

Licensing, Purview, SharePoint, Teams and tenant administration

8
Conflicting service plansMicrosoft 365 admin center (Errors & issues)Group-based licensing errors in Microsoft 365: conflicts, usage location and fixes CountViolationMicrosoft Graph (licenseAssignmentStates)Group-based licensing errors in Microsoft 365: conflicts, usage location and fixes DependencyViolationMicrosoft Graph (licenseAssignmentStates)Group-based licensing errors in Microsoft 365: conflicts, usage location and fixes LicenseAssignmentAttributeConcurrencyExceptionMicrosoft Entra audit logGroup-based licensing errors in Microsoft 365: conflicts, usage location and fixes MutuallyExclusiveViolationMicrosoft Graph (licenseAssignmentStates)Group-based licensing errors in Microsoft 365: conflicts, usage location and fixes Not enough licencesMicrosoft 365 admin center (Errors & issues)Group-based licensing errors in Microsoft 365: conflicts, usage location and fixes ProhibitedInUsageLocationViolationMicrosoft Graph (licenseAssignmentStates)Group-based licensing errors in Microsoft 365: conflicts, usage location and fixes UniquenessViolationMicrosoft Graph (licenseAssignmentStates)Group-based licensing errors in Microsoft 365: conflicts, usage location and fixes
All 88 guides

Every Entra ID, Defender & Microsoft 365 guide, by area

Troubleshooting guides, how-tos and deep dives for Microsoft Entra ID, Microsoft Defender, Exchange Online and Microsoft 365.

Browse all articles

Entra ID 34

Exchange Online 18

Defender 27

Microsoft 365 9

Suggest a topic

Hit a Microsoft 365 error that isn't here?

Send me the exact error and what you were doing — the most-requested errors become the next guides.

Email me Message me on LinkedIn