Page 75 of the DSE Microsoft 365 & Identity knowledge center, with source-backed guidance and practical next steps.
Clear guidance for Microsoft 365, Entra identity, account protection, collaboration, endpoint policy, and lifecycle changes.
Exchange Online message trace records how Microsoft 365 handled a message. Narrow queries, the correct identifier, ingestion timing, and preserved results make it useful evidence for mail-flow troubleshooting.
Read the checklist
Microsoft Purview Audit can investigate activity across Microsoft 365, but reliable evidence depends on verified ingestion, licensing-based retention, precise UTC queries, least-privileged access, and preserved exports.
Read the guide
Restricted Access Control can require both normal SharePoint permission and membership in an allowed Microsoft 365 or Entra group before a user opens site content.
Read the guide
OneDrive Known Folder Move can redirect familiar Windows folders to the cloud, but prior redirection, other tenants, unsupported files, storage, bandwidth, and sync health must be resolved first.
Read the playbook
Teams external access supports chat, calls, meetings, and separately enabled file sharing in federated chats, while guest access creates an Entra B2B identity for team and broader resource collaboration.
Read the guide
Microsoft Secure Score measures progress on recommended actions across supported products. It can prioritize work and show trends, but it is not an absolute breach-risk measure or a substitute for change testing.
Read the explainer
Service health reports active Microsoft 365 issues, while Message center reports planned changes and required actions. Both need named owners, triage criteria, tracked tasks, and an out-of-band status path.
Read the playbook
Windows Autopatch eligibility depends on licensing, Intune enrollment, corporate ownership, join and co-management state, recent check-in, Microsoft endpoints, diagnostic data, edition, and update channel.
Read the checklist
Emergency access accounts provide a recovery path when normal administrators cannot sign in or activate a role. They must be independent, strongly protected, monitored, and tested without becoming everyday admin accounts.
Read the checklist
Microsoft Entra Privileged Identity Management can replace unnecessary standing access with eligible, time-bound, approved, and auditable role activation.
Read the playbook