Microsoft product
CISA's SCuBA project gives you a checklist. A real hardening program needs CIS mapping, licensing notes, setup steps, user-impact warnings, and scripts for every control across all six M365 workloads.
A device lifecycle walkthrough of 16 Intune security controls: enrollment restrictions, compliance enforcement, encryption, patching, app protection, and offboarding, with licensing and setup steps.
Desired state configuration turns M365 baselines from physical checklists into monitored, enforceable standards. We review Microsoft 365 DSC and take an honest look at Simeon Cloud's friendlier take.
Azure AD gains IPv6 support that can break location-based Conditional Access, GDAP milestones shift with an update promised by February 15, cross-tenant sync previews, and Teams retires the wiki.
Microsoft 365 Lighthouse now bulk-migrates DAP to GDAP with suggested role tiers, reusable templates, and built-in JIT access. How the wizard works and how it compares to CIPP.
Microsoft sets a February 27, 2023 date to enable Authenticator number matching by default, Teams Premium adds Advanced Virtual Appointments, users can delete chats, and SharePoint URL rename hits GA.
CISA's SCuBA project pairs a free M365 security baseline with ScubaGear, a PowerShell tool that grades your tenant against it. Setup steps, licensing gotchas, and a CIS Controls mapping.
Azure AD P2 auto-remediates risky users; P1 only detects them. This Power Automate flow sweeps every customer tenant for risk detections and opens a PSA ticket the moment a new one lands.
Five Azure AD MFA controls most tenants never touch: number matching, location context, authentication strengths, and two registration reports that catch attacker-added MFA methods.
Field notes from a real GDAP migration: a seven-step checklist, the security group and PIM structure that worked, and answers on customer emails, competencies, Azure access, and distributors.
App registrations ride on DAP pre-consent. When DAP relationships disappear in early 2023, vendor integrations like IT Glue, CIPP, and HaloPSA stop reading customer tenants until re-consented.
Two ways to bulk-migrate DAP to GDAP before the deadline: Microsoft's CSV-driven CLI gives granular control, CIPP's built-in wizard gives speed. Here is how to pick, with a demo of both.
