Exchange Online Hardening · Checklist Sécurité Microsoft 365

Skillplan M365 Checklist

2026-07-20 19:24

Progression de l'évaluation 0 / 136 éléments 0%

Conformité jusqu'à présent 0 / 0 contrôles 0%

Disable SMTP AUTH, IMAP, and POP at the tenant level; allow per-mailbox only with documented justification.

Disable automatic forwarding to external recipients via the Anti-spam outbound policy.

Verify mailbox audit logging is enabled for every mailbox.

Configure DKIM signing for every accepted domain; publish a strict DMARC p=reject after a monitoring period.

Enable the Anti-phishing policy with mailbox intelligence and impersonation protection for executives and high-value users.

Apply the External sender warning tag to all inbound mail from outside the organization.

Disable user-created Exchange Online mailbox auto-forwarding rules to external addresses.

Restrict the Mail Recipient Creation management role to a small named group; review quarterly.