The Top 5 Microsoft 365 Security settings that you NEED to switch on NOW!

This time I take a look at what I think are my top 5 Microsoft 365 Security settings that you need to switch on now! In just 30mins I will show that these 5 simple things will not only improve your security 99%. But will also will deter potential hackers and criminals. As always I’ve time coded the session so you can jump from topic to topic, and I’d love your feedback as well as know what your top 5 would have been.

Time codes

00:00 Session Intro
03:21 Configure Threat Policies & Configuration Analyser
09:57 Organisational Privilege Access
13:50 Implement Secure Score
18:02 Implementing Multi Factor Authentication MFA
22:02 Enabling Authentication Methods & Monitoring User Activity
28:56 Session Review & Next Steps

Links mentioned in video:

[andrewmccallum]

Top 5 tips for M365 - defo recommended, very practical, thanks Andy

[iyiempire]

Hello sir I love your content . Love from India. Waiting for your new videos on Detailed ASR rule to improve secure score.

[marcoapdantasify]

Great tips ! Already working on it. Thank you Andy.

[iamJeanPhilippe]

Love that he is using mac 😁 Thanks for the video!

[theadministratorprospect]

Hello Andy,

I´m an IT student and i just wanted to say that I love the videos! I'm learning so much. I wonder if you could make a step-by-step video on how to set up Universal Print. There are many sites and videos on what UP is, but none will take you from scratch to finish. Again, many thanks for the content and i hope you will consider my suggestion.

[edwardstark]

Use conditional policies for MFA. Not per user MFA.

[ondamax]

Hello - for my users, I have the MFA Disabled yet Logging In always asks for MFA. Any way to control that? I thank you for all your work and support.

[Xploitacademy]

What is your opinion on MFA for service accounts and conference room accounts ?

[mohammedhisham]

Hi Andy!
I really appreciate all your great work as I've been learning a lot from you!
And as you are a Mac user could you take us to step by step on how to install SSH, VPN, and P2S setting between Azure VM and the local mac. I've been trying to make a secure connection to access the az VM localhost from my local browser on mac but I stopped with the VPN configuration file and it didn't work for me for some reason.
Finally, thanks again and hope my request will be considered!

[Zenwork]

Great Video, thank you, however as home user Mac is better ;-), take care

[aidanodr]

Video very good but probably needs an update at this stage. The UI and "menu item" locations in general have changed in many places PLUS many of the security Recommendations you mention are no longer "Free", they require addition of things like Microsoft Defender Plan 1 and 2 .. this under Implementation

[astonish]

With the basic auth being depreciated;
One of our vendors have reached out requesting that we need to make the changes in our Azure environment, to grant them office 365 exchange online api app permission. This external vendor app only applies to one of our custom domain.

My concern is I do not want to give access to all other custom domains in my organization to this external vendor app. And if I do grant the external vendor app access to the org wide, how much of our org environment will be exposed to the vendor, what kind of access will they have etc.

Is it possible to enable and grant my office 365 exchange online api permissions to an external vendor app specifically to one of my custom domains?... Just wondering also, if this can be done by specifying a security dynamic azure group and add members?

Any suggestions and how would very much appreciated.

Many thanks

[fsm]

hi sir andy,

can you help on my problem, when I'm creating a dlp policy the devices option is not showing.

[mortenwiingreen]

Hi Andy,

I am a great fan of your channel and watches many of the videos, I am from Denmark and an administrator in a mid size company, we are using Azure and Exchange online.

In the MFA part I do not have the option to add ´trusted IP-range in service settings.
I have Office 365 E3 license. Is the Trusted IP in service settings an E5 option?

Best regards
Morten

[ManjinderSingh-xlfe]

Hello Andy,
One of our users was recently attacked with a trojan virus. Now, I want to scan my whole 365 tenant for viruses. Please let me know can I scan my whole tenant?

[sammysame]

Good info but this is painful to watch - can you talk any slower - FIXED it by playing at x1.5

[JayDee-pobc]

Are your tutorials only for business users? I am having trouble working out One Drive & the instructions Microsoft sent to me are not easy to follow. I am older (80+) and new things do not come to me easily - to my grandkids its all second nature, but greek to me.