Sensitivity Labels have quickly become a core component of any Enterprise level Microsoft 365 tenancy. Information Governance is becoming more and more relevant in the Cloud space where we potentially have a enormous amount of disparate unstructured data in various Teams, SharePoint Sites, OneDrive etc. Depending on the license SKU, Sensitivity labels can allow manual …
Continue reading Using Sensitivity Labels as Conditions in DLP Policies (Preview)
On the 22nd of September the Microsoft 365 Compliance Manager came into General Availability. Available in the Compliance Portal, the Compliance Manager helps organizations with Microsoft 365 to gain control over their compliance and risk state. In this post, we'll look at some of the features available in the Compliance Manager. The first think you'll …
Microsoft Search, particularly when effort is put in to build metadata and Organizational Information is an extremely useful tool that doesn't always get the credit it deserves (probably partially stemming from the consumer experience with 'bing' over the years). Organizations can leverage Microsoft Search to help their users locate information extremely quickly and efficiently - …
Continue reading Easily Enhance Microsoft Search with Organizational Data
Office 365 Groups/Microsoft Teams contain a host of useful components such as SharePoint, Exchange Online and Planner. Another component of Office 365 groups by default is a Power BI Workspace. There are two types of Power BI Workspaces: Classic and Modern Workspaces. Modern Workspaces allow for granular permissions and are standalone objects with an enhanced …
Continue reading Prevent Office 365 Groups/Teams from provisioning Power Bi Workspaces
Azure AD Sign-in logs are the go-to place for troubleshooting user sign-ins, tracking malicious login attempts and analyzing Conditional Access policies for Microsoft 365. There are a lot of recent updates which make traversing the Sign-in logs more user friendly and speed up troubleshooting. Some of the recent updates are visibility of refresh tokens and …
Continue reading Azure AD Sign-ins Conditional Access Policy Details (Preview)
Microsoft To-Do is a easy to use, efficient basic planning tool. It works great for personal or small group planning. This month, Microsoft are adding the ability for users to share To-Do lists with external users on personal Microsoft account and Work or School Office 365 accounts. When it is rolled out, external sharing will …
Continue reading Prevent users sharing Microsoft To-Do lists externally
This topic seems talked to death nowadays. Almost everyone has come across the strong recommendation to disable legacy authentication in their Microsoft 365/Azure AD tenancy. If you haven't done this yet then the clock is ticking down to the day Microsoft disable the functionality automatically - October 2020 for new tenants at the time of …
Continue reading PSA: The importance of disabling legacy authentication in Microsoft 365
With the extraordinary uptake of Teams in recent months, a lot of users are still finding their way around what they can and can't do and how to customize their Teams client settings. One thing I've seen cause problems (particularly on screen shares during meetings) is the Teams notification message preview. When sharing a screen …
Continue reading Turn off message preview for Teams notifications
A very popular attack upon breached email accounts since the forwarding feature became available is for the attacker to create a auto-forwarding rule in the users mailbox to essentialy receive a copy of all mail that is sent to that account. This forwarding is extremely quick to set up and not easily found as most …
Continue reading Auto-Forwarding Default Change for ATP Outbound Spam Policy
Segregation of admin roles in Microsoft 365 has always been a challenge. Different admin roles help to apply the principal of least privilege for admins but there was always an issue where multiple logical groupings existed in a single tenant. They are not always managed globally and not every admin should have access to every …
Continue reading Azure Active Directory Administrative Units
Sean McAvinue 