New tenant, what do I need to do/be aware of

[technoguy414]

I have students setup as [email protected] and faculty setup as [email protected].

 

The immediate things I noticed is that when students launch sharepoint, they can see faculty cards and their info. Also on the outlook address list, they can see all staff email info, etc. My first step is segregate the global address list, which I need some direction on...

 

What else do I need to ensure I do.

[chaplic]

Braindump of random ideas..

 

Turn off user consent

 

Look at SecureSecore

Extend default onedrive size to 5TB

 

Extend recycle bin in exhcange to 30days

 

design and implement conditional access if licensed

 

Figure out a process for keeping up to date and acting on all the ongoing changes

 

Setup branding

 

Setup self service password reset, inc pre ctrl-alt-del

 

disable user access to azure ad console

 

turn on MFA (by conditional access preferealy)

 

Ensure the settings for users to buy powerapps and related is off

 

Setup SPF and DMARC

 

Setup Azure AD Connect health, if using

 

Set longer retention policy on Office365 activity log if desired

 

Setup activesync connection policies

 

Setup DLP policies

 

Setup any nailed-up TLS policies required by LA

 

review anti spam settings

 

Decide what parts of the licenses you are going to use and setup group based licensing

 

setup Seamless SSO

 

decide on leavers process

 

decide on if you want people to able to download proplus from the portal

 

Decide on if all users can create o365 groups / teams