The Safety Net Tee
Anyone who has ever run a destructive script against production.
pwsh — production PS> Remove-Mailbox -Identity * -WhatIf What if: no changes were made.
general
Working As Designed Tee
Anyone who has had a real bug closed with these three words.
INC0048211 · RESOLUTION NOTES WORKING AS DESIGNED no further action will be taken
general
Silent Sign-In Failure Tee
Identity engineers who can read this error code without looking it up.
SIGN-IN TRACE AADSTS50058 silent sign-in failure
entra
Open Relay Tee
Mail admins who have found a connector accepting anonymous submissions.
Open Relay MAIL FROM: <anyone> RCPT TO: <everyone> 250 OK (unfortunately)
exchange
Immortal Infrastructure Tee
Exchange admins still migrating something that predates their career.
Public Folders 1996–
exchange
No Test Tenant Tee
Admins whose change window is whenever users are asleep.
THERE IS NO TEST TENANT ONLY PRODUCTION
general
Not Compliant Tee
Endpoint admins, and anyone the policy has locked out of their own mail.
DEVICE NOT COMPLIANT grace period expired yesterday
intune
Slow Ring Tee
Admins waiting on a feature everyone else already has.
you are here Your Tenant Is In The Slow Ring
general
Cloud Time Tee
Anyone who has been told a change is applied and then waited two days for it.
Cloud Time allow up to 48 hours to propagate
general
Break Glass Tee
Identity admins who keep an emergency account nobody is allowed to touch.
EMERGENCY ACCESS 01 BREAK GLASS IN CASE OF CONDITIONAL ACCESS
entra
Turned It Off Tee
The admin who quietly disabled the rollout everyone was excited about.
OFF I Turned It Off TENANT-WIDE affected users: all of them
copilot
Oversharing Tee
Anyone who audited permissions the week the assistant went live.
salaries_FINAL_v2.xlsx Oversharing Is Now A Feature — Copilot
copilot
Copilot Found It Tee
The admin who got that support ticket and knew immediately what happened.
CEO CIO My Boss Me Copilot Found The Salary Spreadsheet shared with: everyone (edit access)
copilot
I Thought E5 Was Enough Tee
Anyone who has discovered the top tier has tiers above it.
LICENSE RECEIPT TOP TIER PLAN INCL TEAMS PREMIUM + $ INTUNE SUITE + $$ ENTRA SUITE + $$$ COPILOT + $$$$ TOTAL MORE I Thought E5 Was Enough
licensing
Teams Team Tee
The person whose actual job title contains the same word three times.
TEAM I’m On The Teams Team it’s teams all the way down
teams
Six Workloads Tee
Admins who know exactly how much gets provisioned by one button.
+ CREATE One Click Six Workloads none will ever be deleted
teams
Blocked By DLP Tee
Anyone whose legitimate email was stopped for containing a number.
Blocked By DLP matched: something shaped like a card number
compliance
Still On Hold Tee
Whoever inherited a hold nobody is authorised to release.
MATTER 2019-114 LITIGATION HOLD · LITIGATION HOLD Still On Litigation Hold release sign-off: pending since 2019
compliance
Released From Quarantine Tee
Mail admins, and the newsletter that finally got through.
Released From Quarantine threat verdict: newsletter
security
Nine Portals One Setting Tee
Anyone who keeps a bookmarks folder just for admin consoles.
Nine Portals One Setting it was in the seventh one
general
Office 364 Tee
Anyone who has read an incident report explaining why it does not count.
SERVICE HEALTH · LAST 365 DAYS Office uptime: 99.72% (rounds down) SLA credit: denied
general
Retire or Wipe Tee
Endpoint engineers who have hovered over both buttons and felt genuine fear.
DEVICE ACTIONS · 1 SELECTED CONFIRM ACTION this action cannot be undone RETIRE WIPE Retire or Wipe only one of them keeps the photos
intune
Assigned, Not Provisioned Tee
Whoever explains to a new starter why the licence they have does not work yet.
SERVICE PLAN STATUS ASSIGNED PROVISIONED ACTUALLY USABLE Assigned. Not Provisioned. give it 24 hours. then another 24.
licensing
Impossible Travel Tee
Anyone who has triaged this alert and found a VPN at the end of it.
RISK DETECTION · HIGH 18 MIN 09:14 DUBLIN 09:32 MANILA Impossible Travel user verdict: "that was the VPN"
security
MFA Fatigue Tee
Anyone who has approved a prompt at 3am purely to make it stop.
AUTHENTICATOR · 11 PENDING Approve sign-in? 03:14 · location unavailable DENY APPROVE MFA Fatigue approve it so it stops
security