How to Block Ad-Hoc Email-Based Subscriptions
No MSOL Module, So How Can You Block Email-Based Subscriptions By now, I assume that every Microsoft 365 tenant administrator knows about the deprecation of the MSOL and AzureAD PowerShell modules....
View ArticleAre Microsoft E5 Licensing Add-Ons a Good Deal?
Microsoft E5 Security for Microsoft 365 Business Premium Now Available On April 6, 2025, Microsoft announced that the Microsoft E5 Security add-on is available to Microsoft 365 Business Premium...
View ArticleMaester: Microsoft Security Test Automation Framework
A Community-Driven Security Configuration Analyzer for Entra ID Tenants The irrepressible Merill Fernando, a product manager in the Microsoft Entra ID organization, came together with Security MVPs...
View ArticleThreat Actors Increase Misuse of OAuth Applications
OAuth Apps Used to Automate Financially-Driven Attacks The December 12, 2023 post for the Microsoft security blog covers how “Threat actors misuse OAuth applications to automate financially driven...
View ArticleMicrosoft’s AI Strategy for Security Depends on Data
KQL and Sentinel are Core Security Components, Even in an AI World The December 7 post on Microsoft’s security blog is titled “New Microsoft Purview features use AI to help secure and govern all your...
View ArticleThe Importance of the Office 365 Audit Log for IT Forensics
Microsoft DART Likes the Office 365 Audit Log (Unified Audit Log) On September 26, Microsoft’s Detection and Response Team (DART, aka the cybersecurity team you never want to meet) published an...
View ArticleHow Working with Protected PDFs in Microsoft 365 is Becoming Easier
The Long Road to Progress Sensitivity labels do an excellent job of protecting Office documents, largely because the applications include the necessary code to apply and access encrypted documents....
View ArticleCustomer Lockbox Support Arrives for Microsoft Teams
Joins Exchange, SharePoint, and OneDrive Message center notification MC346909 (March 25) announces the general availability of an update to enable Teams support for the customer lockbox feature...
View ArticleHow to Exploit Azure AD Sign-in Data to Detect Problem Service Principals
Spring Clean Time for Apps Coming Soon Last year, I wrote about the need to review and clean up Azure AD integrated applications. That article describes how to extract information from Azure AD to a...
View ArticleContinual Access Evaluation Enabled for Critical Azure AD Events in Microsoft...
Important Microsoft 365 Workloads Respond to Critical Azure AD Events Microsoft made a critical announcement on January 10 when they revealed that the base Office 365 workloads support continual...
View ArticleWhy Humans Should Apply Their Knowledge of Office 365 When Reviewing OCAS Alerts
Don’t Assume Everything a Computer System Spits Out is the Truth As Office 365 for IT Pros subscribers know, we publish a new edition annually. Part of the preparation for a new edition is an...
View ArticleExchange Online Adjusts Schedule for Removal of Basic Authentication
By now, everyone should be convinced that using basic authentication for connections to Exchange Online is a bad idea. Microsoft has been pushing to remove basic authentication for quite a while, with...
View ArticleMicrosoft 365 Security for IT Pros Published
Since 2015, the Office 365 for IT Pros team has pioneered the concept of writing an ever-changing book to track developments in cloud technology. We’re now in our seventh edition, and we’re delighted...
View ArticleWhy Basic Authentication for Exchange Online is So Bad
Time Running Out for Old Email Connection Protocols I’ve heard some people doubting that Microsoft will remove basic authentication from seven Exchange Online mailbox connection protocols. The...
View ArticleUsing Password-Protected Sharing Links with SharePoint Online
Stop Unwanted People Using Sharing Links Sent for Documents Announced at session BRK3100 at the Ignite 2018 conference last September and then included in the OneDrive for Business Roadmap update for...
View ArticleHow to Find Unprotected Azure Active Directory Administrative Accounts
Multi-Factor Authentication Should Be Enabled for Privileged Accounts Update: This article describes a script using Graph APIs to generate a report showing the MFA status for accounts and highlights...
View ArticleCISA Report Only Scratches Surface of Securing Office 365
Makes Basic Security Recommendations for Office 365 CISA Report AR19-133A The U.S. CyberSecurity and Infrastructure Security Agency (CISA) “Microsoft Office 365 Security Observations” report issued on...
View ArticleUnified Labeling Version of Information Protection Client Now Generally...
Reduced Confusion as Everyone Waits for Native Support in Office Clients As is the nature of the Microsoft cloud, the preview version of the Azure Information Protection client (unified labeling...
View ArticleMicrosoft 365 Security and Compliance Centers Now Generally Available
New Consoles Turn Up in Office 365 Tenants The set of administrative consoles available from the Microsoft 365 Admin Center Previewed in January 2019, this week the new Microsoft 365 Security Center...
View ArticleEliminating Basic Auth for Exchange Online with AAD Conditional Access Policies
Reducing Account Compromises for Exchange Online Last October, Microsoft introduced the ability for Office 365 tenants to disable basic authentication for Exchange Online using protocol authentication...
View Article