3 min readTutorial
Turn on MFA for Microsoft 365 before the next phish
By Michael NarehoodMicrosoft 365
A practical path to require multifactor authentication in Microsoft 365 for a small business, without locking everyone out on Friday afternoon.
Microsoft 365
14 articles
1 min read
Power Automate and OAuth app sprawl
By Michael NarehoodMicrosoft 365
Citizen automation is great until a forgotten flow holds privileged consent.
1 min read
Detecting unusual sign-ins in Microsoft 365
By Michael NarehoodMicrosoft 365
Impossible travel, new countries, and legacy protocol spikes: signals worth a human look.
1 min read
Voicemail and Teams phone security basics
By Michael NarehoodMicrosoft 365
Toll fraud and voicemail hacks still happen. A short hardening list for modern phone systems.
1 min read
SharePoint permissions inheritance traps
By Michael NarehoodMicrosoft 365
Broken inheritance solves one share and creates ten mysteries.
1 min read
Teams external access settings worth reviewing
By Michael NarehoodMicrosoft 365
Federation and guest access are powerful, and easy to leave too open.
1 min read
Microsoft Secure Score: what to prioritize (and ignore)
By Michael NarehoodMicrosoft 365
Secure Score is a guide, not a grade. Which recommendations move risk for small tenants.
1 min read
Calendar permissions: the oversharing nobody notices
By Michael NarehoodMicrosoft 365
Open calendars leak meetings, clients, and travel plans. Tighten defaults without killing scheduling.
1 min read
Spring cleaning for Active Directory and Entra ID
By Michael NarehoodMicrosoft 365
Disable stale accounts, reclaim licenses, and shrink attack surface before summer projects start.
1 min read
Email retention vs archive confusion
By Michael NarehoodMicrosoft 365
Litigation holds, archives, and “we keep mail forever”: clarify before you need eDiscovery.
1 min read
Microsoft 365 external sharing defaults that save headaches
By Michael NarehoodMicrosoft 365
SharePoint and OneDrive sharing settings that balance client collaboration with least privilege.
1 min read
Password managers for teams under twenty
By Michael NarehoodMicrosoft 365
A practical way to kill shared spreadsheets without enterprise IAM theater.
1 min read
Shared mailboxes are not a security boundary
By Michael NarehoodMicrosoft 365
Why “just use the info@ mailbox” creates audit and access problems, and cleaner patterns that scale.
5 min read
Copilot for Microsoft 365 in SMB reality
By Michael NarehoodMicrosoft 365
What Copilot actually costs, how it uses your tenant data, and when it helps small teams versus generating expensive drafts nobody trusts.