Tag - EMS

Updates coming soon to the Azure AD Best practices checklist

Update: The best practices checklists and guides are now available at GumRoad. I will be updating the best practices checklist and guide for Azure AD again soon, but I wanted to post a couple of notes about the coming changes--since it may be a while before I get around to...
Read more...

How-to setup Intune quickly (and strategically) in your environment

UPDATE: I have updated the setup script to now be a single script, with the JSON files embedded within it. You do not need to download the JSON files separately, however they are provided for reference. UPDATE: I also have a best practices guide for securing Windows 10 Business edition using...
Read more...

Introducing the Microsoft Office 365 Email Security Checklist

Okay. I think I have had enough. Enough of what? Enough of reports like this one. And since email is still the number one attack vector in use by the bad guys, it's time we step up our game--I'm looking at you, IT pros (especially consultants). Of note, from the...
Read more...

My favorite Conditional Access Policies for the SMB

It's not even a question in my mind anymore--every org who moves their email and other data sets into Office 365 should be protected with Enterprise Mobility + Security (also available in Microsoft 365 Enterprise plans). If you are in the Business subscription of Microsoft 365, this means adding Azure...
Read more...

Differences between Azure Information Protection labels and Office 365 Sensitivity labels

In the previous two posts, we looked at two capabilities of Azure Information Protection (AIP) P1, which is one of the many subscriptions bundled into Microsoft 365 Business: Email encryption & customizationLabels for classifying messages and documents Recent announcements have shifted the sands a bit here with so-called "Unified labeling"--which...
Read more...

Protect messages and documents in Microsoft 365 Business with AIP, part 1: Email encryption

In this series, I am going to show off some of the functionality and customization that you can make in Microsoft 365 Business, which includes Azure Information Protection (AIP). There is a growing user base for this SKU, and a lot of admins out there trying to figure out how...
Read more...

Showdown: Exchange Active Sync vs. Office 365 MDM vs. Intune (MDM and MAM)

The Microsoft 365 platform offers customers not one, not two, but three distinct Mobile Device Management solutions (well, technically four, as we'll see). In my experience, most small business customers will be fine with nothing more than a well configured Exchange Active Sync policy, requiring basics like a pass code,...
Read more...

The new and confusing Microsoft 365 SKU’s

I have written one post on Microsoft 365 (Business edition) so far. And I haven't had as much time to continue playing with it as I like. But, here is what I can tell you: the literature out there on these SKU's can be confusing, since they are mostly marketing-oriented,...
Read more...

How to bundle even more security into your Office 365 subscription

In a previous post, I covered some of the most common SKU's that are frequently purchased by small businesses, who are migrating to the Office 365 platform. In a nutshell, by FAR the most common of those are Office 365 Business Premium and Office 365 Enterprise E3--and the latter of...
Read more...

Should I Supercharge Office 365 with the Enterprise Mobility Suite?

Hello! Now that I have amassed a few different posts that outline differences between Microsoft's Enterprise Mobility Suite (EMS) and the built-in features that are included with certain Office 365 plans, I thought it would be nice to summarize our findings in one place.  If you are having trouble deciding whether or not...
Read more...

Helping IT Consultants Succeed in the Microsoft Cloud

Have a Question? Contact me today.