Yearly Archives - 2019

Limiting privilege in Microsoft 365 Business

One of the most important things you can do for boosting your security posture on any technology platform (Microsoft or otherwise), is limiting administrative privilege. We have long known that any given user should really only have enough access to do their jobs, and nothing more. Now in the Enterprise subscriptions...
Read more...

What are the benefits of using Autopilot in Microsoft 365? And, how to configure it.

Autopilot is a "low touch" or "no touch" deployment method that can be leveraged by IT departments to enable self-service computer deployments. Users can basically pick up a new Windows 10 device, sign in, and have all of their applications and data come to them (no profile migration, etc. required). But...
Read more...

YES!!! The Encrypt button is coming to Outlook on the Web!!!

I am so happy to see in my tenant the new Encrypt button (replaces the "Protect" button). I am not on the standard release in my tenant, so you might not see this right away if you're just following standard. Any tenant with AIP (e.g. E3, E5, Microsoft 365 Business) should...
Read more...

Managing Microsoft Teams: More to it than meets the eye

There have been some pretty good improvements over the last year with Teams, and there is only more good news on the way. Check out the backlog of requested features with updates at UserVoice. Great stuff like Private channels and Outlook group calendars are on the near horizon. But a lot...
Read more...

How (and why) to leverage Microsoft 365 Business to manage third-party applications

One capability of Azure Active Directory which is included in your Microsoft 365 Business subscription (but which hardly anyone is taking advantage of in the SMB space) is the ability to bring third-party SaaS applications under management, and assign them to end-users--publishing them centrally via an application portal (myapps.microsoft.com), and...
Read more...

Password write-back is now supported on Microsoft 365 Business Premium! (And how to setup SSPR for hybrid accounts)

Well, well. Isn't this a pleasant surprise? Microsoft recently granted another one of my wishes, which I have previously blogged about, here. (1) Self-service password reset (SSPR) is now supported for hybrid synced accounts on the Microsoft 365 Business Premium subscription. The welcome announcement made on Microsoft's tech community blog did...
Read more...

Differences between Azure Information Protection labels and Office 365 Sensitivity labels

In the previous two posts, we looked at two capabilities of Azure Information Protection (AIP) P1, which is one of the many subscriptions bundled into Microsoft 365 Business: Email encryption & customizationLabels for classifying messages and documents Recent announcements have shifted the sands a bit here with so-called "Unified labeling"--which...
Read more...

Protect messages and documents in Microsoft 365 Business with AIP, part 2: AIP labels

Azure Information Protection (AIP) uses “labels” to classify and protect data. Labels are published to end users for eventual consumption and use through a “policy.” In the olden days, applying permissions and restricting access to files was more rudimentary—again, it was based on the concept of the “four walls.” We would erect...
Read more...

Helping IT Consultants Succeed in the Microsoft Cloud

Have a Question? Contact me today.