Harbour ITMenu

Powered by Office Sentry 2.2.0

You're in the demo. Three fictional clients with made-up people. Look around freely: nothing can be changed, and it all resets every night.Get Office Sentry
Month-end · October 2026/Contoso Legal LLP

Contoso Legal LLP · October 2026

Draft Not on a report plan
See the report PDF
Needs your eyes: 1 new critical finding.

Verdict and commentary

Action needed

Contoso Legal LLP's Microsoft 365 has a critical security gap that should be fixed now.

What we recommend next

Kept from month to month

None yet, so the report suggests its own from the failing checks. Add your own to replace them.

Projects to propose · half a day or more of work
  • Identity and Conditional Access projectAbout 7 hourshigh
  • Email security projectAbout 8 hourshigh
  • Device management with Intune projectAbout 4 hourshigh
  • Windows upgrade and hardware refresh projectAbout 1 dayhigh
Quick fixes · smaller jobs to just do
  • Have each listed admin register a strong methodUnder an hour · 1 admin without MFA, and 1 whose registration isn't knowncritical
  • Remove anyone links that are no longer needed, and set the rest to view-only with an expiry dateUnder an hour · 3 files and folders shared with anyonehigh
  • Give each site a second ownerAbout 1 hour · 1 site with no owner, 2 sites with one ownerhigh
  • Review each app with the clientUnder an hour · 1 app with access to mail, files or the directoryhigh
  • Confirm with the client that each change was plannedUnder an hour · 1 domain had sign-in settings changed in the last 30 dayshigh
  • Take guests out of each site's owners group and away from Full Control; give them Edit or Read through the site's members or visitors group insteadUnder an hour · 1 guest with full control of 1 sitehigh
  • Make an active person, ideally two, an owner of each listed team or groupAbout 1 hour · 4 teams and groups without an ownermedium
  • Turn on the online archive for each listed mailboxAbout 2 hours · 3 mailboxes at or over 90% of quotamedium

And 11 more on Recommended projects.

Notes on findings

Shown under the check on the report
critical 1 admin without MFA, and 1 whose registration isn't known
Add a note
high 1 admin not covered by MFA
Add a note
high 1 guest with admin roles
Add a note
high 1 app with access to mail, files or the directory
Add a note
high 2 of 19 computers not encrypted
Add a note
high 3 of 19 Windows computers past end of support
Add a note
high 1 suspicious inbox rule
Add a note
high 3 external forwards
Add a note
high 4 users without MFA
Add a note
high Legacy authentication is allowed
Add a note
high 1 domain had sign-in settings changed in the last 30 days
Add a note
high 1 site with no owner, 2 sites with one owner
Add a note
high 1 guest with full control of 1 site
Add a note
medium 2 accounts inactive for 90+ days or never used
Add a note
medium 2 admins without a phishing-resistant method
Add a note
medium 1 app with privileged roles
Add a note
medium 3 of 20 managed devices not compliant
Add a note
medium 1 mail domain without DKIM
Add a note
medium 2 domains without DMARC enforcement
Add a note
medium 4 teams and groups without an owner
Add a note
medium Enforced by Require MFA for all users, with 1 exclusion to review
Add a note
medium 1 disabled account still licensed
Add a note
medium Anyone, including anonymous links
Add a note
medium 1 file or folder outside people can edit
Add a note
medium 3 mailboxes at or over 90% of quota
Add a note
low 1 account reports to a blocked manager
Add a note
low 1 app registration with expiring or expired credentials
Add a note
low 1 of 20 joined computers not in Intune
Add a note
low 2 devices haven't checked in for 30+ days
Add a note
low 1 of 22 device records unused for 90+ days
Add a note
low 1 domain with SPF problems
Add a note
low 1 of 1 mail domain doesn't fully enforce MTA-STS
Add a note
low SMTP AUTH is on for the organisation
Add a note
low Anyone, including guests, can invite guests
Add a note
low 3 people can only use a text or call as a second factor
Add a note
low 2 subscriptions with spare licences
Add a note
low Any user can register an app
Add a note

Review

New critical or high since the last report: 19