Skillplan M365 Checklist
2026-07-20 00:25
M365
Microsoft 365 Security Checklist
de
en
fr
it
System Online
← Back to sections
Mitigation Controls · Section 6 of 17
Entra Connect (Hybrid Identity)
Assessment Progress
0
/ 136 items
0%
Fulfillment so far
0
/ 0 controls
0%
Explain this control
Disable hard-match takeover on Entra Connect to prevent unintended account merges.
Not Fulfilled
Fulfilled
Accepted
Disable soft matching where business needs do not require it.
Not Fulfilled
Fulfilled
Accepted
Do not synchronize on-premises privileged user objects (Domain Admins, Enterprise Admins) to Entra ID.
Not Fulfilled
Fulfilled
Accepted
Enforce MFA on every cloud account that mirrors an on-premises privileged identity.
Not Fulfilled
Fulfilled
Accepted
Restrict network access to Entra Connect servers to administrative jump hosts only.
Not Fulfilled
Fulfilled
Accepted
Treat Entra Connect servers as Tier 0 assets: dedicated PAW management, no other workloads.
Not Fulfilled
Fulfilled
Accepted
Encrypt Entra Connect database backups and restrict restore permissions to backup administrators.
Not Fulfilled
Fulfilled
Accepted
Forward Entra Connect application and security event logs to a SIEM for centralized analysis.
Not Fulfilled
Fulfilled
Accepted
Save and Continue →
