You spent last month turning Restricted Content Discovery on, site by site, to keep the messy ones out of Copilot. Now someone asks a fair question: which sites did we actually restrict? Clicking through Active sites one at a time is not the answer. PowerShell gives you two clean ways to get it, one site…
Everything so far has been about sites and encryption. Restricted Content Discovery hides a whole site from Copilot. A sensitivity label with encryption locks a single file. But two things fall straight through those gaps. The Confidential document that is not encrypted, sitting on a site you never restricted, which Copilot folds into a summary…
Propose Copilot to a security-minded colleague and you get the same question within about thirty seconds. “So it makes a copy of all our data? Where does that copy live? Who else can see it?” The mental picture is Copilot hoovering up every file in the tenant into some giant AI brain in the sky….
Sure enough, somebody in your Microsoft environment eventually asks the question: do we simply have to choose between Glean and enabling Copilot? In all likelihood, what’s going on behind the scenes here is that one of them has to be better for corporate data security than the other. And, that’s an entirely reasonable question. The…
The user opens the document protected with a sensitivity label and reads the content smoothly and then asks Copilot to provide a summary of the document. Copilot denies the request by providing a link to the exact same document which was open all along. Therefore, they create a support ticket stating that Copilot does not…
The admin enables the Restricted SharePoint Search feature to make sure that Copilot does not go to the dirty sites that have not been cleaned up yet, informs the boss that everything is done, and in just one week, the helpdesk has a dozen tickets with the subject of “I cannot find anything using search.”…
A tenant user logs into Copilot, tells Copilot to summarize last quarter’s data and Copilot returns a number from a workbook that he/she wasn’t supposed to access. All along the permission was there; no one saw it as SharePoint has no unified view that answers the one question that an admin always needs answered –…
PnP for SharePoint, Graph for everything else – but PnP ships Invoke-PnPGraphMethod, so it can call any Graph endpoint. Why ‘which module’ is often the wrong question, and the support difference that decides it in enterprises.
Sharing links are the quietest oversharing vector in SharePoint, and Copilot will surface every forgotten one. I built a free PowerShell tool to find them tenant-wide, rate the risk, and revoke the bad ones. Here is how to use it.
Get-PnPList returns 19 lists on a site with four. ItemCount counts folders as items, so it is not your file count. And the fast way to get storage beats summing files by a margin that grows with every document.