Entra Connect (Hybrid Identity) · Microsoft 365 Security Checkliste

Skillplan M365 Checklist

2026-07-20 19:30

Bewertungsfortschritt 0 / 136 Elemente 0%

Bisherige Erfüllung 0 / 0 Kontrollen 0%

Disable hard-match takeover on Entra Connect to prevent unintended account merges.

Disable soft matching where business needs do not require it.

Do not synchronize on-premises privileged user objects (Domain Admins, Enterprise Admins) to Entra ID.

Enforce MFA on every cloud account that mirrors an on-premises privileged identity.

Restrict network access to Entra Connect servers to administrative jump hosts only.

Treat Entra Connect servers as Tier 0 assets: dedicated PAW management, no other workloads.

Encrypt Entra Connect database backups and restrict restore permissions to backup administrators.

Forward Entra Connect application and security event logs to a SIEM for centralized analysis.