Questions and answers.

App registration secrets and certificates, enterprise application credentials and SAML signing certificates, applications without an owner, unused applications, domains and their mail records, the certificates and tokens of Intune, Entra Connect and cloud sync, and Conditional Access policies that still name deleted objects. Eight sections, each with one sentence that says why it is checked.

No. Microsoft does not return the value of a secret and the app does not ask for one. Remind keeps the name, the dates and the owner of each credential, never the credential itself, and never a private key.

No. Renewals stay yours: each section of the report says where to go and what to change, and the next run shows the new date. Nothing in your tenant is renewed, rotated or deleted by the product.

They do not expire, but they break. A domain move, a new mail service or a rebuilt website can overwrite them, and nobody notices until mail bounces. The app looks them up from your computer as the Internet sees them and compares them with what Microsoft 365 expects.

The tenant’s warning addresses, or the workspace’s owners when none are set, get every item due. An owner you assign to an item gets the warnings for that owner’s items. Mails go 30, 14 and 7 days and 1 day before each end date and on the day.

Mark it handled, with the date the renewal should show up, and its warnings pause; if the next run still finds the old date after that day, they resume. Or mark it ignored with the reason: its warnings stop, and the reason shows on the report.

Watch and MSP. They run the app every day on a computer of yours, which is what makes a warning possible. The Preview and the One-time plan show the same dates in the report, without mails.

Nothing, unless you set up scheduled runs. Their setup creates one app registration of your own, “GlacierPoint Remind scheduled run”, with read permissions and the public part of a certificate made on your computer. You see the plan before anything is written, and Remove takes it away again.

No. We hold no password, token, secret or certificate for any tenant. The app on your computer does the work, signed in as you, and a scheduled run signs in with a certificate whose private key never leaves your computer.

A Windows 10 or Windows 11 computer, 64-bit, and a Microsoft 365 administrator account who can grant the read permissions once. For scheduled runs, a computer that is on, with the account that set them up signed in.

Yes. Every workspace starts as the Preview: one tenant, up to 3 runs, every section with its counts and its three nearest items, 30 days of history, no card needed.

By invoice, for now. Choose a plan and we send an invoice to your organization, payable by bank transfer. The plan switches on when the payment arrives.

Yes. The MSP plan holds every tenant in one workspace, each with its own warning addresses, for $79 a month plus $7 a month per tenant.