Microsoft 365 Cloud Security Administration - Hands On

Microsoft’s terminology can be confusing, so I have provided an explanation of some of the common terms that you will hear in this course.

In this lecture I will show you how Microsoft Defender can protect your Microsoft office Applications like email from viruses and malicious websites. You will also be introduced to Microsoft Defender for Cloud Apps.

In this lecture you will learn how Microsoft Defender for Endpoint uses the built in sensors in Windows 10 to gather data concerning malicious executable's, attachments or suspicious URL's. Microsoft Defender for Identity is used in your hybrid environment with an on-premises Active Directory Domain controller with the ATP sensor installed on each DC.

If you don't have an on-prem domain controller, your Tenant Identity is protected by Security Defaults, Conditional access policies, MFA, password policies and location based policies. With these you can protect your Applications, Endpoints, Identity, and Data

In this lecture we will demonstrate how all four services in Microsoft 365 work together to protect our Applications, Endpoints, Identities, and our Data from attack?

In this lecture, we will talk about the differences between these two cloud solutions.

In this lecture, we will do an overview of the Microsoft 365 E5 Lab setup. FYI - I am in the process of updating the student guides. I will show you how to create your own "FREE" Microsoft 365 E5 Subscription. As of 5/11/2023

This lecture covers the recommended Hardware and software for the Host, which is your computer

Yes Microsoft changed the rules, BUT, You can still get a free Microsoft 365 E5 Subscription - Follow lecture 12 and 13 to see how

Yes Microsoft changed the rules, BUT, You can still get a free Microsoft 365 E5 Subscription - Follow these instructions and see how.

In this lecture we will create two backup Global Admins (Emergency access accounts) by assigning the Global Admin Role to the users.

In this lecture, we will be Installing the Microsoft Authenticator app on your phone or tablet.

The Authenticator app provides Multi-factor authentication.

In this lecture, I will show you how to set up automatic MDM enrollment so that you can control who can enroll their devices into Intune. Microsoft is continually updating and moving things from one admin center to another. I have provided updated directions in the handout so that you can complete the lab. As of 5/11/2023

This lecture is a summary and a demonstration of how Enrollment restrictions work.
Microsoft has changed the names of several admin centers, I have updated the student handout so the changes are indicated in parentheses, so that you can follow along in your LAB.

This lecture explains why we chose Virtual box over Hyper-V. We also download and install Virtual box. The handout has been updated to go along with the lab.

In this lecture I show you how to optimize your VM settings to get the best possible performance. The handout has been updated to go along with the lab.

In this lecture, we will download and install Windows 10 Enterprise on our VM. The handout has been updated to reflect changes in the lab.

In this lecture, we will install and configure Guest Additions and set up shared folders so that we can move files from the VM to the host machine for a future lecture. The handout has been updated to reflect changes in the lab.

In this lecture, I’m going to show you how to create a user and a Template

In this lecture, I will show you how to create multiple users and email recipients using a CSV file. The handout has been updated to reflect changes in the lab.

In this lecture, we're gonna talk about group type, description, when to use, and where to create our groups in Microsoft 365. The handout has been updated to reflect changes in the lab.

In this lecture, we will create a group then run a PowerShell script that will allow us to control group creation. Download GroupCreators.zip. Handout reflects the changes Microsoft has made to MS365 groups.

In this lecture, we will take a look at Roles in Microsoft 365. Each admin role maps to a common business function that gives those people permission to complete specific tasks. The student guide has been updated to reflect changes in the lab.

This lecture shows you how to establish a connection between Intune and Microsoft Defender for Endpoint. The student guide reflects current changes for the LAB.

In this lecture, we’ll create a group and a Endpoint detection and response policy to protect our devices. The student Doc reflects any current changes that Microsoft has made.

In this lecture, we’ll use Microsoft Endpoint Manager to set up an Antivirus policy.

In this lecture, from the client VM we’ll check the results before and after a successful onboarding and policy deployment

In this lecture, we will associate the Microsoft Store for Business account with Intune.

Then assign the Company Portal App to a group that we create called CPA users. Then deploy the App to the users in that group.

In this lecture, we will create a security group, then add a few users to the group.

In this lecture, we will download the 7-zip msi app. Download the W32 content preparation tool and convert the app into the intunewin format, then upload the app and deploy it to a group of users.

In this lecture, I will show you how to uninstall the 7-zip application that you have previously installed.

In this lecture, from one of the VM's, we will test the install and uninstall commands from our Teamviewer.exe application. Download the install-uninstall command.txt file. The install and uninstall commands are in this txt file.

In this lecture, we're going to create a dynamic user group. Which will automatically add users to the group based upon a rule that you  specify.

In this lecture, we will go through the steps needed to deploy Teamview.exe.

Several students wanted to know how to deploy google.exe. That is what this student guide is about. Download the google.inst txt file, this file contains the install and uninstall commands and the link to download google Chrome 64 bit.

In this lecture, we will use Microsoft Endpoint Manager to configure Microsoft 365 Apps for Windows 10.

In this lecture, I will show you the simple process of manually adding Apps to your VM. Depending upon the speed of your hard drive I recommend choosing just one or two apps.

In this lecture, I will show you how to use Secure score for Microsoft 365

In this lecture we will create two policies. One that requires MFA for all admins and the other that requires MFA for all users. We will turn off security defaults then enable conditional access.

In this lecture we will complete three policies. Blocking Legacy authentication, then create User Risk and Sign-in policies.

In this lecture, we'll take a look at the sign-in and audit logs.

In this lecture, we will be creating a Safe Links policy. Safe Links is used to provide warnings to users that send emails that contain URL’s that are on Microsoft’s list of blocked sites or on a block list that you can configure.

In this lecture, we are going to create a Safe Attachment Policy. Safe Attachments will actively scan through all attachments in email messages you receive trying to find any malicious code or content.

While I was creating a Safe Links policy, I received a client error. If you experience the same problem, here is a fix for that issue.

In this lecture, we will set up an anti-malware policy. If you recall the Anti-Malware policy protects the user's email account from any malicious software that may be used to attack a user's email account.

In this lecture, we will take a look at Sensitive info types and Sensitivity labels.

In this lecture we will take a look at the prerequisites that must be configured before Microsoft Defender for Cloud Apps is operational.

In this lecture we will Integrate Microsoft Defender for Endpoint with Defender for Cloud Apps. Which will give you the ability to block apps not approved by IT security

In this lecture we discuss new methods for delivering Windows devices to the customer in the shortest amount of time.

In this lecture, we will talk about the license requirements for Windows 10 and Autopilot.

In this lecture, we will configure the Enrollment Status Page for Windows Autopilot and the Out-of-box experience.

In this lecture we will use Azure Active Directory to setup Company branding and customize the sign-in page that your users see when they sign in.

In this lecture first, we will create a device group, then we will Create and Configure an Autopilot deployment profile.

In this lecture we will use PowerShell to manually create the CSV file used for device registration.

In this lecture we will import the CSV we created from the Windows 10 VM using Powershell, to complete the Windows autopilot device registration.

In this lecture we will discuss all the steps on the backend needed for a successful Windows 10 reset. 

In this lecture I will demonstrate what a successful Windows 10 reset should look like.