Entra ID — Identity Foundations · Microsoft 365 Security Checkliste

Skillplan M365 Checklist

2026-07-20 19:32

Bewertungsfortschritt 0 / 136 Elemente 0%

Bisherige Erfüllung 0 / 0 Kontrollen 0%

Block legacy authentication protocols (POP, IMAP, SMTP AUTH, EAS basic) tenant-wide via Conditional Access.

Enable Entra Password Protection with a custom banned-password list aligned with your organization.

Require all users to register a strong authentication method (Authenticator, FIDO2, or Windows Hello).

Disable the 'Stay signed in?' prompt across sign-in branding contexts to reduce token persistence on shared devices.

Set the password expiration policy aligned with NIST 800-63B (no forced rotation, only on suspicion of compromise).

Configure tenant restrictions v2 to block sign-ins to external tenants from managed devices.

Investigate and remediate every 'high' sign-in risk event within 24 hours via Entra ID Protection.

Disable users' ability to invite external guests unless they hold the Guest Inviter role.