Harbour ITMenu

Powered by Office Sentry 2.2.0

You're in the demo. Three fictional clients with made-up people. Look around freely: nothing can be changed, and it all resets every night.Get Office Sentry
Month-end · October 2026/Fabrikam Dental Group

Fabrikam Dental Group · October 2026

Draft Not on a report plan
See the report PDF
Needs your eyes: 1 new critical finding.

Verdict and commentary

Action needed

Fabrikam Dental Group's Microsoft 365 has a critical security gap that should be fixed now.

What we recommend next

Kept from month to month

None yet, so the report suggests its own from the failing checks. Add your own to replace them.

Projects to propose · half a day or more of work
  • Identity and Conditional Access projectAbout 1½ dayshigh
  • Email security projectAbout 1 dayhigh
  • Device management with Intune projectAbout 8 hourshigh
  • Windows upgrade and hardware refresh projectAbout 2½ dayshigh
  • SharePoint storage and archiving projectAbout 6 hoursmedium
Quick fixes · smaller jobs to just do
  • Have each listed admin register a strong methodUnder an hour · 1 admin without MFA, and 1 whose registration isn't knowncritical
  • Give each site a second ownerAbout 1 hour · 2 sites with no owner, 2 sites with one ownerhigh
  • Review each app with the clientUnder an hour · 1 app with access to mail, files or the directoryhigh
  • Confirm with the client that each change was plannedUnder an hour · 1 domain had sign-in settings changed in the last 30 dayshigh
  • Take guests out of each site's owners group and away from Full Control; give them Edit or Read through the site's members or visitors group insteadUnder an hour · 1 guest with full control of 1 sitehigh
  • Disable accounts that haven't signed in for 90 days, or were created over 30 days ago and never usedAbout 2 hours · 7 accounts inactive for 90+ days or never usedmedium
  • Make an active person, ideally two, an owner of each listed team or groupAbout 1 hour · 4 teams and groups without an ownermedium
  • Remove anyone links that are no longer needed, and set the rest to view-only with an expiry dateUnder an hour · 2 files and folders shared with anyonemedium

And 10 more on Recommended projects.

Notes on findings

Shown under the check on the report
critical 1 admin without MFA, and 1 whose registration isn't known
Add a note
high 1 admin not covered by MFA
Add a note
high 1 guest with admin roles
Add a note
high 1 app with access to mail, files or the directory
Add a note
high 6 of 54 computers not encrypted
Add a note
high 7 of 54 Windows computers past end of support
Add a note
high 1 suspicious inbox rule
Add a note
high 5 external forwards
Add a note
high 27 users without MFA
Add a note
high Legacy authentication is allowed
Add a note
high 1 domain had sign-in settings changed in the last 30 days
Add a note
high 2 sites with no owner, 2 sites with one owner
Add a note
high 1 guest with full control of 1 site
Add a note
medium 7 accounts inactive for 90+ days or never used
Add a note
medium 2 admins without a phishing-resistant method
Add a note
medium 1 app with privileged roles
Add a note
medium 9 of 55 managed devices not compliant
Add a note
medium 1 mail domain without DKIM
Add a note
medium 2 domains without DMARC enforcement
Add a note
medium 4 teams and groups without an owner
Add a note
medium Enforced by Require MFA for all users, with 1 exclusion to review
Add a note
medium 1 disabled account still licensed
Add a note
medium Anyone, including anonymous links
Add a note
medium 2 files and folders outside people can edit
Add a note
medium 3 mailboxes at or over 90% of quota
Add a note
medium 88% of about 1.45 TB used (1 TB + 10 GB × 46 licences)
Add a note
low 1 account reports to a blocked manager
Add a note
low 1 app registration with expiring or expired credentials
Add a note
low 1 of 55 joined computers not in Intune
Add a note
low 5 devices haven't checked in for 30+ days
Add a note
low 1 of 57 device records unused for 90+ days
Add a note
low 1 domain with SPF problems
Add a note
low 1 of 1 mail domain doesn't fully enforce MTA-STS
Add a note
low SMTP AUTH is on for the organisation
Add a note
low Anyone, including guests, can invite guests
Add a note
low 4 people can only use a text or call as a second factor
Add a note
low 2 subscriptions with spare licences
Add a note
low Any user can register an app
Add a note

Review

New critical or high since the last report: 29