Microsoft 365 security is a big topic. Focus is important when it comes to getting things done. In this article, we suggest five areas that administrators could work on during 2023 to improve the security posture of their tenant. You might already have established full control over some of these areas. Even if you have, it's still good to consider if you can improve security.
Dynamic Azure AD administrative units are like dynamic Azure AD groups in that they have a membership rule to calculate their membership. Azure AD uses the rule to find members regularly, so the administrative unit never goes out of date. That is, assuming the properties of Azure AD user accounts are maintained and up to date.
Many commentators got very exercised about the Microsoft 365 outage of 25 January 2023. The root cause was an untested configuration change to a WAN router which shouldn't have happened, but that's no reason to conclude that cloud services are flawed.
It's great to be able to run Graph API requests in PowerShell scripts if everything goes right. This article describes why some common Graph API errors occur in scripts and what to do when the errors happen. Most errors are due to permissions assigned to the Azure AD apps used to run scripts and getting the basics will resolve those problems.
It's easy to apply sensitivity labels to new teams, but what happens if you need to apply labels to a batch of existing teams? This article explains the basic steps necessary to find teams without labels, figure out the labels to apply, and apply the selected labels.
Exchange 2013 support ends on April 11, 2023. After that, Microsoft will not make fixes for security or functionality problems available to customers. It's time to make the decision to upgrade to Exchange 2019 or move to Exchange Online. Most organizations will find that Exchange Online is the right choice. Exchange 2019 is appropriate for organizations that have the right skills, experience, and investment to run a secure Exchange service.
Microsoft 365 tenants can create Azure AD accounts in different ways. No matter whether you create accounts manually or with PowerShell scripts, the important thing is to end up with the right data in Azure AD because many Microsoft 365 features depend on accurate directory.
Microsoft has broadened and deepened the functionality available through sensitivity labels since their introduction in 2018. This article explains the basics of sensitivity labels and highlights some of the areas where important changes have occurred.
RBAC for Applications is a new method to secure Azure AD app access to Exchange Online mailboxes. In this article, we explain how to use Managed Identities in Azure Automation with RBAC for Applications making sure that scripts can only access selected mailboxes.
Microsoft is deploying a new version of the Teams webinar functionality to tenants. The new implementation is more functional and easier to use, and the impression is that this is a very simple but powerful implementation of a webinar management system.
Here’s to another year of practical advice on all things Microsoft! Practical 365 is wrapping up the year with a whopping 200+ articles, focusing on topics such as PowerShell, Exchange, Azure AD, Teams, and much more. This article shares 9 must-read posts, recommended by Steve Goodman, Tony Redmond, and Paul Robichaux.
Security researchers love to report software vulnerabilities that they find. That's their role and it's a valuable contribution to the technical community. However, some of the reports about Microsoft 365 flaws are over-hyped and under-considered, like a recent example covering the risk of phishing in the Exchange Online Direct Send feature.
