Microsoft product
Configuring Intune by hand across a client base is slow and error-prone. A PowerShell runbook can stamp out compliance policies, BitLocker, and required apps in a single command.
M365 Business gained features that close the security gap with E3. As of April 2019, the deciding factors are user count, Intune adoption, Windows 10 upgrades, and RDS.
A clean Intune build follows an order: device groups, autoenrollment, policies and profiles, apps, platform enrollment, then a test device. Here is the sequence for M365 Business.
External sharing is on by default across SharePoint Online. Here are the four sharing modes, how authenticated and anonymous external sharing actually work, and where to lock it down.
Office 365 DLP can find and protect PII like credit card, SSN, and health records across Exchange, OneDrive, and SharePoint. Here is a HIPAA policy built from template to report.
Office 365 ATP ships with Safe Attachments and Safe Links switched off. Here is what each feature does and the step-by-step config to turn them on.
A G Suite to Office 365 migration with BitTitan fails at the source if API access is wrong. Here is what cannot move and the exact Google Admin steps to authorize MigrationWiz.
NIST 800-171 has 109 requirements. Microsoft's Compliance Manager turns them into a scored, assignable assessment inside Office 365. Here is how to build it.
Inter-tenant collaboration in Exchange Online comes down to two controls: user-level sharing policies and organization relationships. Here is what each one does and where to set it.
Office 365 message encryption needs the right license, an activation step, and transport rules to fire automatically. Here is the full setup and the recipient experience.
AD Connect dirsync errors and duplicate users almost always trace back to attribute and prep mistakes made before the first sync. Here is the pre-sync checklist that prevents them.
Moving one Office 365 tenant into another while keeping the domain means planned downtime. Here is the BitTitan sequence that holds it to 30 minutes, with every PowerShell script.
