01Nov2021
09Mar2020
New Updates to the Office 365 Security Checklist and Guide, including Free eBook
With more years comes more wisdom (and more reader feedback helps)! As such, it was time to polish up the guide that kicked off this whole journey. This is a big update, and in a much more consumable format, I think. I am even renaming it to "The NEW Office...
25Nov2019
Unpopular opinion: Do not restrict users from creating Teams (Office 365 Groups)
I realize that advocating for no (or very limited) boundaries on who can create Teams puts me in the minority. When I look out across the community, I mostly see consultants in this space suggesting the opposite is a superior approach for various reasons--that the privilege should be constrained heavily....
22Nov2019
Updates to my Exchange Online and Office 365 ATP scripts
Just a quick note--this week I updated the Exchange Online and ATP scripts that I publish and use to provision new tenants--to fall more in line with the new best practices that were published by the Exchange Online Protection and Office 365 ATP teams.* You can also use the new...
11Nov2019
From Ignite 2019: Office 365 ATP Best Practices Analyzer, and other actions MS is taking to democratize security
I haven't had time to write an overall review of Ignite and all the various announcements that were made. And honestly, I might just skip that because there are so many others out there doing the same. They probably did an even do a better job than I would. So...
06Aug2019
Updated: Exchange Online baseline / best practices scripts
I recently updated the scripts that I use to provision new Exchange Online tenants and configure them according to best practices, and I just uploaded these edits to GitHub. The main script is Baseline-ExchangeOnline.ps1--this is like a "master" script that contains almost all of the others (with a couple of...
24Jul2019
How to manage and secure service accounts in Microsoft Office 365 (without MFA)
Okay, so hopefully everyone knows by now that MFA is not an "optional" thing that you can decide to turn on, or not, depending on your "feelings." It isn't a choice, and your feelings about it don't matter. You need to turn it on. I would recommend requiring MFA...
01Jul2019
The Azure AD Best Practices Checklist
Update: Downloadable/printable copies of the Microsoft 365 Best practices checklists and guides are now available. Thanks for your support! Disclaimer: This checklist is NOT a comprehensive overview of every consideration when implementing Azure AD. For instance, the list was built with a typical SMB/SME in mind. That means there is no...
28Jun2019
Does Microsoft backup my data in Office 365? Do I need more or additional backup?
A new reader question came in, and frankly it's one that I hear a lot. I'm sure I have smatterings referring to this issue in other articles, but this one should stand to clear up the questions once and for all--this will be something I can point people to moving...
11Jun2019