

- MICROSOFT OFFICE 365 SUBSCRIPTION RETURN POLICY HOW TO
- MICROSOFT OFFICE 365 SUBSCRIPTION RETURN POLICY MANUAL
Configuration drift analysis and history.The Analyzer page is split into two sections: Found in the same location as the Present Security Policies, the Configuration Analyzer takes the concept of the PowerShell-based ORCA and expands on it. Figure 1: Defender for Office 365 Preset Security Policies Configuration AnalyzerĬonfiguration Analyzer integrates the functionality of the ORCA tool directly into the Microsoft 365 Security Portal. *It’s important to note that the Strict Policies will always take precedence over the Standard ones, and custom Defender policies will take precedence over the pre-set ones. Simply select the baseline you want to apply as shown in Figure 1, select the assignment for EOP and Defender for Office 365 settings, and you’re done! The policies can be assigned to users, groups, or mail domains, similar to any Defender for Office 365 Policies. The policies align with the Standard and Strict levels defined in the Microsoft recommendation documentation and once configured, there is no customization involved. The policies can be found in the “Threat Policies” section of the Microsoft 365 Security Portal and offer two “flavors” of protection: Standard and Strict. Preset Security Policies are useful for organizations that don’t want to spend a whole lot of time and effort tweaking settings and are happy enough to comply with the recommendations provided.
MICROSOFT OFFICE 365 SUBSCRIPTION RETURN POLICY HOW TO
Later in this article, I’ll review how to use each of these tools to make configuring Defender for Office 365 an easier process. This integration comes in two forms, Preset Security Policies, and Configuration Analyzer. Microsoft has now made this even easier by directly integrating the ORCA functionality into the Microsoft 365 Security Portal. The ORCA tool aims to help administrators compare their configuration against the recommendations and perform a gap analysis against their live settings. Tony Akers has published a great article on using the ORCA tool here which I highly recommend reviewing sooner than later.

A nice way to get a quick report on the configuration status of Defender for Office 365 is to run the Office 365 Advanced Threat Protection Recommended Configuration Analyzer (ORCA).

MICROSOFT OFFICE 365 SUBSCRIPTION RETURN POLICY MANUAL
That being said, there is a lot of manual work involved in going through the documentation and updating your configuration in line with the guidance provided. You’ll want to use this page as a guide for your initial setup to make sure you can align with Microsoft recommended practices. Luckily, Microsoft has provided some great guidance on this through the Recommendations for EOP and Defender for Office 365. When getting started, it’s easy to get lost in the sea of checkboxes and buttons. Defender for Office 365 provides a lot of configuration options and thresholds that can be customized to suit your organizational policies and requirements.
