Protect Your Business 7 Security Best Practices for Microsoft 365

Nice video, but one of the things I recommend for your domain is to have a SPF, DKIM and DMARC DNS records to stop spoofers - it also makes your domain name look professional.

[@RussellRiker]

As always, love the content and thank you for sharing.

[@drewcross9927]

I love the intro!

[@piyushpandey6930]

You are an amazing teacher

[@simple-security]

great vid, thanks Andy!!!

[@MISTYEYED.]

Thank you!

[@ianbird6997]

Thanks Andy

[@jbirdaspec]

Do you provide contract statements of work for organizations regarding security assessments and security implementations for 365?

[@AndyMaloneMVP]

I’m a technical and security instructor who delivers training for multiple companies, government departments and many others. Due to a heavy schedule, however consulting is not one of my offerings at present.

[@AliRaza-vv5xm]

Thank you, Andy, for the helpful videos and information! I noticed that E3 licenses don’t include conditional protection settings. If all users already have regular MFA enabled, do we still need to configure anything in Identity Protection methods?

[@AndyMaloneMVP]

You don’t get identity protection with an E3 you would need to purchase a P2 license for Entra

[@mRxmodule]

Thank you Andy all of your videos. I learned so much from your videos. I have finally got my first IT job and I very excited to start it. Just one question because I (as usual) very curious: How come that you using macOS instead of Windows? :)

[@AndyMaloneMVP]

It’s one of the most common questions that I get. All I can say is once you go Mac, you’ll never go back 😊 seriously though it’s not about the device it’s about how I can secure my data in the cloud irrelevant of the device that you’re using. All the best, Andy.

[@martinargimon730]

excellent video. Thx a lot Andy. Rgds Martin ( south africa)

[@AndyMaloneMVP]

Thanks martin I’ll be in your wonderful country in December 😊

[@martinargimon730]

@@AndyMaloneMVP great Andy ! Enjoy your stay 😊. All the best

[@davidasplund7088]

Thanks for the video. i have a question. i made a conditional access policy on my own account and now when i try to log back in im stuck in some sort of a loop with authenticatior that repeats over and over. Any change you have some tips or trix for me to pass this to login and remove the policy . im am the global admin om my account aswell. .

[@AndyMaloneMVP]

OK this is a clear example where you should have a separate admin account. If you do go into the admin account and your MFA settings and force a reset. This is documented on learn.microsoft.com also the fact it’s going round and round I would try another browser or in private browser as this might help. Good luck.

[@rragglbon]

That is usually why you have "break glass" accounts ready. They are admin too, but you only use them in case of emergency and NEVER for anything else. Costs you a license, but well worth it. If you have co-admins or an MSP with Admin permissions I would ask them to disable the Access Policy. Other than that, I wouldn't know what else you could do. You can try contacting Microsoft Support but my experiences with them have been horrendous so far. They often barely speak English and hence have a very hard time understanding what your actual problem is.

[@IT_XP]

@@rragglbon You do not need to license admin accounts

[@cpuuk]

Generic question- does Copilot have access to the (my) company data, in my Tenant?

[@rragglbon]

Yes, there have been several reports about that. Even that Copilot leaked data from competitors that was actually proprietary and confidential due to incorrect share settings. At this point, I cannot recommend.

[@AndyMaloneMVP]

Simple answer is yes Microsoft does have access to your tenant for Copilot. It’s super important as somebody responded here that you secure your tenant first. This is why Microsoft Copilot roadshow is currently doing the rounds in order to teach people about the benefits of Microsoft purview and all the compliance feature features it has.

[@RoderickSchoenmaker]

can you please make a video about zivver tool

[@AndyMaloneMVP]

I’ve not used it, but I’ll certainly take a look for you

[@geosids7815]

Dear Andy it would be helpful to give us demos for the products that MSFT pushes everywhere like Sentinel//Defender for Cloud//Defender EASM//Microsoft Defender for Cloud Apps//EntraID Global Secure Access

[@AndyMaloneMVP]

Hi thanks for the comment. You are quite correct however I would remind you that I have covered many of these topics in previous videos and this particular video was really aimed at small business and companies who didn’t have the budget to go for an E5 subscription as let’s face it it’s quite expensive.

[@marios4275]

[@andyrobbo65]

bring back no jibba jabba

[@AndyMaloneMVP]

🤗👍