Connect-ExchangeOnline fails in PowerShell ISE with "A window handle must be configured". Why this happens since module 3.7.0 and how to fix it: PowerShell 7 through winget, or -DisableWAM.
Connect-ExchangeOnline stops with "Error Acquiring Token", followed by a NullReferenceException or error 0x80070520. What the message means since module 3.7.0, and how to fix each variant.
SPF, DKIM and DMARC can be green while the mail test marks DNSSEC and DANE red. Sign your own zone first, then move MX off mail.protection.outlook.com.
Inventory your senders, publish one SPF record, switch on DKIM with 2048-bit keys, then DMARC from p=none with np=reject to p=reject. Tests each step with t=y (RFC 9989). With the records, PowerShell and checks.
A complete reference to SPF mechanisms and qualifiers, DKIM key and signature tags, and every DMARC tag after RFC 9989, with a generator that builds the records for you and Microsoft 365 notes throughout.
Install Exchange Online PowerShell V3. ISE (5.1) and PowerShell 7. Module 3.7+ will not run from ISE. Microsoft 365 (M365).
Connect-ExchangeOnline: interactive, certificate, managed identity. REST V3, no WinRM. Microsoft 365 (M365 / Microsoft365).