365sentri

Dear MSPs,

No more rock paper scissors to decide who onboards the new MSFT Tenant.

Assess. Baseline. Configure. Done.

❤️ Us (we were there once)

[365sentri @365sentri]

Would you let someone walk into your office with 20 devices and self-register them onto your network?

No.

So why allow the cloud version? Saw this on a call this week. A tenant had a strong Microsoft Secure Score, 80%+.

Then we checked Microsoft Entra join and registration settings.

Users could join devices to Microsoft Entra. Maximum devices per user: 20 - Microsoft allows up to 50!

The MSP changed it on the call: Users may join devices to Microsoft Entra: None.

Maximum devices per user: 5.

Added it to their 365sentri blueprint. Set it to remediate.

Next automation run, the tenant matched the new standard, and the tenants in that blueprint were aligned to it.

Secure Score stayed the same. Score is a metric. A useful one, but still a metric.

You need to close the risk, not just collect the point.

[365sentri @365sentri]

Some of the Microsoft 365 Tenants who have acquired the Business Premium license we see are still running on Security Defaults. Off or ON?

Learn more about Security Defaults in our blog 365insights :

https://t.co/HShfyO2VyB

[365sentri @365sentri]

Check out our recent explainer on Security Defaults. Useful as a recap for people getting into Entra Tenant Management:
https://t.co/VwdnqRddLi

[365sentri @365sentri]

@brockpierson Windows 95 baby!!

[365sentri @365sentri]

https://t.co/y1SeZQCrX5

[365sentri @365sentri]

@brockpierson of course I have!

[365sentri @365sentri]

@ProtonMail I won't ever give you a bad tip, but I will say, what not to do:

DO NOT: Use the same password everywhere so your accounts can feel more connected and - delete the installed password manager to save space on your drive

[365sentri @365sentri]

@brockpierson 1000% used it!

[365sentri @365sentri]

https://t.co/rRUGnYcqTT

[365sentri @365sentri]

@otokyo a Time Machine to go back and stop that crime

[365sentri @365sentri]

@brockpierson I am 100% not a bot. Ask me a question only a human can answer.

[365sentri @365sentri]

@TutaPrivacy Great update looking forward to Drive release ~

[365sentri @365sentri]

@MichaelKlineJr @brockpierson Ive seen 7 deployed in manufacturing setups this year 👀

🫩

[365sentri @365sentri]

@erd_harrison @Bartko_Actual @brockpierson Did you ever use ICQ?! If I say Uh Oh does the sound play in your head.

Or was it AOL chat. Wow you're all forcing me to have an involuntary memory

[365sentri @365sentri]

@brockpierson My first exposure to Red hat where I bought a magazine at a news agent in the 90s which had a CDRom on it and I was like 15 and wiped my families HP Pavilion HDD. Was excellent 👌 highly recommend.

[365sentri @365sentri]

@brockpierson If it is cold, do they still qualify to be a hot dog?

[365sentri @365sentri]

@brockpierson the full stack:

Dial-up modem → Telnet (or direct shell) → Gopher client → binary download of Netscape

1994 I think

[365sentri @365sentri]

@brockpierson I had to use telnet to download Netscape navigator

[365sentri @365sentri]

@XavierRiveraX 🫡 you are a top bloke.

[365sentri @365sentri]

https://t.co/JJ31WIGfxK

[365sentri @365sentri]

I would say these are the three we see the most

Inconsistent application of Multi Factor Authentication policies

Administrator accounts used for daily driving of tasks

Lack of country specific conditional access policies when all of your staff are based in one country

Like "Block ________" country instead of setting so "Allow _______" and Block all others.