The Top 5 Microsoft 365 Security settings that you NEED to switch on NOW!

Рет қаралды 27,964

Күн бұрын

This time I take a look at what I think are my top 5 Microsoft 365 Security settings that you need to switch on now! In just 30mins I will show that these 5 simple things will not only improve your security 99%. But will also will deter potential hackers and criminals. As always I’ve time coded the session so you can jump from topic to topic, and I’d love your feedback as well as know what your top 5 would have been.
Visit me at www.Andymalone.org
Time codes
00:00 Session Intro
03:21 Configure Threat Policies & Configuration Analyser
09:57 Organisational Privilege Access
13:50 Implement Secure Score
18:02 Implementing Multi Factor Authentication MFA
22:02 Enabling Authentication Methods & Monitoring User Activity
28:56 Session Review & Next Steps
Links mentioned in video:
MFA: • How to deploy Multi Fa...
Conditional Access: • Azure AD Conditional A...
Security & Compliance • What's NEW in Microsof...

Пікірлер: 41

@marcoapdantasify 2 жыл бұрын

Great tips ! Already working on it. Thank you Andy.

@AndyMaloneMVP 2 жыл бұрын

Thanks Marco I’m delighted to hear that 👍😊

@andrewmccallum5699 Жыл бұрын

Top 5 tips for M365 - defo recommended, very practical, thanks Andy

@AndyMaloneMVP Жыл бұрын

Hi Andrew delighted to hear that. Thanks so much for your comment, and all the best. Andy👍

@iyiempire4667 11 ай бұрын

Hello sir I love your content . Love from India. Waiting for your new videos on Detailed ASR rule to improve secure score.

@azuredude 2 жыл бұрын

Great advise!! Thx

@AndyMaloneMVP 2 жыл бұрын

Thanks mate 👍😊

@christianibiri 2 жыл бұрын

Great tips!!!!

@AndyMaloneMVP 2 жыл бұрын

Thanks very much 👍😊

@iamJeanPhilippe 5 ай бұрын

Love that he is using mac 😁 Thanks for the video!

@soodshubham7671 2 жыл бұрын

Thank u Andy Sir :)

@AndyMaloneMVP 2 жыл бұрын

You’re very welcome

@theadministratorprospect32 2 жыл бұрын

Hello Andy, I´m an IT student and i just wanted to say that I love the videos! I'm learning so much. I wonder if you could make a step-by-step video on how to set up Universal Print. There are many sites and videos on what UP is, but none will take you from scratch to finish. Again, many thanks for the content and i hope you will consider my suggestion.

@AndyMaloneMVP 2 жыл бұрын

Hi and thanks for reaching out. I would love to help you out with a video on universal print, however the slight problem is that I would require a physical windows 11 machine. Unfortunately as you probably know I’m all Mac. As such I couldn’t demonstrate this. I can tell you however that Universal print is a feature of Microsoft 365 and is relatively simple to set up. You just download the agent onto a machine, this alongside having a compatible printer and you’re pretty much ready to go. Here is a link to Microsoft Docs article that explains everything you need to know. Thanks for dropping by an asking the question and I’m delighted that you’re enjoying my content. docs.microsoft.com/en-us/universal-print/fundamentals/universal-print-whatis

@cyrilszecsko6173 6 ай бұрын

Maybe in 2027 printing should work ... maybe not. Don't complain about printing , it is why we, IT people, will always have jobs.

@edwardstark6817 Жыл бұрын

Use conditional policies for MFA. Not per user MFA.

@mohammedhisham6114 2 жыл бұрын

Hi Andy! I really appreciate all your great work as I've been learning a lot from you! And as you are a Mac user could you take us to step by step on how to install SSH, VPN, and P2S setting between Azure VM and the local mac. I've been trying to make a secure connection to access the az VM localhost from my local browser on mac but I stopped with the VPN configuration file and it didn't work for me for some reason. Finally, thanks again and hope my request will be considered!

@AndyMaloneMVP 2 жыл бұрын

Hmm this is something I'm not doing. However will take a look

@mohammedhisham6114 2 жыл бұрын

@@AndyMaloneMVP thank you so much! windows documentation and tools seem to be clear. However, with mac seemed tricky. so, your time and consults are highly appreciated!

@ondamax 4 ай бұрын

Hello - for my users, I have the MFA Disabled yet Logging In always asks for MFA. Any way to control that? I thank you for all your work and support.

@AndyMaloneMVP 4 ай бұрын

No MFA is now mandatory for Microsoft 365 and Azure

@mortenwiingreen9748 2 жыл бұрын

Hi Andy, I am a great fan of your channel and watches many of the videos, I am from Denmark and an administrator in a mid size company, we are using Azure and Exchange online. In the MFA part I do not have the option to add ´trusted IP-range in service settings. I have Office 365 E3 license. Is the Trusted IP in service settings an E5 option? Best regards Morten

@AndyMaloneMVP 2 жыл бұрын

Greetings Morten. Thanks for your kind comments, E3 really! As far as I know MFA is available in E3 and you have the same features. You can also manage MFA via conditional access in Azure active directory. The tenant I was using for the demo is an E5, I will try on an E3 and come back to you with the result. In the meantime thanks for supporting my channel and my greetings to Denmark.👍😊

@RedPython Жыл бұрын

What is your opinion on MFA for service accounts and conference room accounts ?

@AndyMaloneMVP Жыл бұрын

Link them to conditional access and bypass MFA by location awareness, ie up address.

@fsm6857 2 жыл бұрын

hi sir andy, can you help on my problem, when I'm creating a dlp policy the devices option is not showing.

@AndyMaloneMVP 2 жыл бұрын

What licence are you using?

@astonish1109 Жыл бұрын

With the basic auth being depreciated; One of our vendors have reached out requesting that we need to make the changes in our Azure environment, to grant them office 365 exchange online api app permission. This external vendor app only applies to one of our custom domain. My concern is I do not want to give access to all other custom domains in my organization to this external vendor app. And if I do grant the external vendor app access to the org wide, how much of our org environment will be exposed to the vendor, what kind of access will they have etc. Is it possible to enable and grant my office 365 exchange online api permissions to an external vendor app specifically to one of my custom domains?... Just wondering also, if this can be done by specifying a security dynamic azure group and add members? Any suggestions and how would very much appreciated. Many thanks

@AndyMaloneMVP Жыл бұрын

Hi Andrew, yes you can. Have you looked at External collaboration settings in Azure AD. I think you will find a solution there. learn.microsoft.com/en-us/azure/active-directory/external-identities/external-collaboration-settings-configure and here learn.microsoft.com/en-us/azure/active-directory/external-identities/whats-new-docs

@astonish1109 Жыл бұрын

@@AndyMaloneMVP Hi Andy, thank you for your reply. Will read through this. I've ended up on setting up an application access policy to point to a mail enabled security group where I've added the specific mailboxes. This gave the external vendor's web app permission to those mailboxes.

@ManjinderSingh-xl1fe 2 жыл бұрын

Hello Andy, One of our users was recently attacked with a trojan virus. Now, I want to scan my whole 365 tenant for viruses. Please let me know can I scan my whole tenant?

@AndyMaloneMVP 2 жыл бұрын

Deploy defender for endpoint or contact a Microsoft partner who I’m sure will be delighted to help you

@aidanodr Жыл бұрын

Video very good but probably needs an update at this stage. The UI and "menu item" locations in general have changed in many places PLUS many of the security Recommendations you mention are no longer "Free", they require addition of things like Microsoft Defender Plan 1 and 2 .. this under Implementation

@AndyMaloneMVP Жыл бұрын

Hi Adam, no problem I’m working on updates for all of my videos at the moment. As you can appreciate it’s a never-ending job 😊 👍

@Zenwork Жыл бұрын

Great Video , thank you, however as home user Mac is better ;-) , take care

@AndyMaloneMVP Жыл бұрын

Totally agree, that’s what I use 😉

@kabyson Жыл бұрын

@sammysame Жыл бұрын

Good info but this is painful to watch - can you talk any slower - FIXED it by playing at x1.5

@AndyMaloneMVP Жыл бұрын

That's a first :-)

@JayDee-po5bc Жыл бұрын

Are your tutorials only for business users? I am having trouble working out One Drive & the instructions Microsoft sent to me are not easy to follow. I am older (80+) and new things do not come to me easily - to my grandkids its all second nature, but greek to me.

@AndyMaloneMVP Жыл бұрын

I totally understand 😊 A fellow KZfaqr Kevin Stratvert doe some great end user videos. I think this could help you 😊🎄🎄🎉🎉kzfaq.info/get/bejne/jsddn9tmx7KqZaM.html