Tenant-wide administration — licensing, Teams, SharePoint and OneDrive sharing, Microsoft Purview, audit, service health and Copilot readiness.
A practical hardening pass for a Microsoft 365 tenant: track progress in Secure Score, then fix admin roles, app consent, legacy authentication, SMTP AUTH, risky defaults and auditing.
How organization, site and link settings combine to decide who can share what in SharePoint and OneDrive, with Set-SPOTenant and Set-SPOSite commands to audit and set them.
A simple change routine for Microsoft 365: Message center preferences and digests, Planner sync, service health alerts, Targeted release and the Graph service communications API.
Take a Purview DLP policy from template to enforcement: simulate with policy tips, tune out false positives, onboard devices for endpoint DLP, then switch it on in stages.
Copilot uses only what people can already open, so oversharing surfaces fast. Find it with data access governance reports, contain it, and fix it with site owners and labels.
How Teams external access (federation) differs from guest access, which Teams, Entra ID, Groups and SharePoint settings control each, and a safe baseline to apply.
Licensing, hardening, change management, audit and collaboration settings — the tenant-wide decisions every Microsoft 365 admin owns.
Start the series 3 partsLabel and protect sensitive content, stop it leaking with DLP, and fix oversharing before Microsoft 365 Copilot surfaces it.
Start the seriesSymptom, root cause, fix — and how to verify it.
Step-by-step setup guides with the exact settings.
How a feature really works, and how to choose.
Tell me which error or task you'd like covered next — new guides come from readers' questions.
