Clients/Northwind Traders

Northwind Traders

northwindtraders.onmicrosoft.com

Each row is an account or setting a check flagged. Findings close on their own once the next collection no longer sees the problem. If something is intentional, accept the risk so it moves out of the totals.

Open findings

first seen since 16 Sep

Open over 90 days

Accepted risks

left out of the totals

First seen: older than 30 days Clear filters

Severity	Account or item	Detail	Category	First seen	Action

critical	breakglass@northwindtraders.example	Global Administrator with no MFA method registered	Admins	11 Sep 2026	Accept risk Reason Review on (optional)
low	g#EXT#@northwindtraders.example	Exchange Administrator: MFA registration unknown	Admins	11 Sep 2026	Accept risk Reason Review on (optional)

high	breakglass@northwindtraders.example	Global Administrator: excluded from Require MFA for all users	Admins	11 Sep 2026	Accept risk Reason Review on (optional)

medium	Brand assets (Marketing / Documents)	Anyone can view, link never expires	Sharing	11 Sep 2026	Accept risk Reason Review on (optional)
medium	holiday.jpg (OneDrive of ann.patel@northwindtraders.example)	Anyone can view	Sharing	11 Sep 2026	Accept risk Reason Review on (optional)

high	DESK-WRIGHT18 (leo.wright@northwindtraders.example)	Windows disk isn't encrypted	Devices	11 Sep 2026	Accept risk Reason Review on (optional)
high	LAPTOP-HUGHES (robert.hughes@northwindtraders.example)	Windows disk isn't encrypted	Devices	11 Sep 2026	Accept risk Reason Review on (optional)
high	LAPTOP-SCOTT29 (olivia.scott@northwindtraders.example)	Windows disk isn't encrypted	Devices	11 Sep 2026	Accept risk Reason Review on (optional)
high	LAPTOP-SMITH07 (olivia.smith@northwindtraders.example)	Windows disk isn't encrypted	Devices	11 Sep 2026	Accept risk Reason Review on (optional)

high	northwindtraders.example	Set domain authentication by mallory.price@northwindtraders.example on 13 Oct 2026	Identity	11 Sep 2026	Accept risk Reason Review on (optional)

high	ann.patel@northwindtraders.example	Mailbox forwarding to ann.patel@homemail.example (keeps a copy)	Email	11 Sep 2026	Accept risk Reason Review on (optional)
high	ann.patel@northwindtraders.example	Inbox rule "Copy to home" forwards to ann.patel.home@homemail.example	Email	11 Sep 2026	Accept risk Reason Review on (optional)
high	olivia.smith@northwindtraders.example	Inbox rule "Invoices to bookkeeper" forwards to bookkeeping@ledgerline.example	Email	11 Sep 2026	Accept risk Reason Review on (optional)

high	g#EXT#@northwindtraders.example	Guest holding Exchange Administrator	Admins	11 Sep 2026	Accept risk Reason Review on (optional)

high	Tenant	No enabled policy blocks legacy authentication for all users	Identity	11 Sep 2026	Accept risk Reason Review on (optional)

high	Supplier invoices never junk	Skips spam filtering for mail picked out by: From domains supplierhub.example	Email	11 Sep 2026	Accept risk Reason Review on (optional)

high	Mail Sync Pro	Mail.Read (application permission; unverified publisher)	Apps	11 Sep 2026	Accept risk Reason Review on (optional)

high	accounts@hollis-partners.example on Finance	Full Control, given Full Control directly	Sharing	11 Sep 2026	Accept risk Reason Review on (optional)

high	Marketing	No enabled owner (Microsoft 365 group)	Sharing	11 Sep 2026	Accept risk Reason Review on (optional)
low	Operations	One owner (Microsoft 365 group)	Sharing	11 Sep 2026	Accept risk Reason Review on (optional)
low	Staff Intranet	One owner (site administrators and owners group)	Sharing	11 Sep 2026	Accept risk Reason Review on (optional)

high	LAPTOP-HUGHES (robert.hughes@northwindtraders.example)	Windows 10 stopped getting security updates on 14 Oct 2025. Extended Security Updates or LTSC can cover it; otherwise upgrade.	Devices	11 Sep 2026	Accept risk Reason Review on (optional)
high	LAPTOP-MARTIN22 (maya.martin@northwindtraders.example)	Windows 10 stopped getting security updates on 14 Oct 2025. Extended Security Updates or LTSC can cover it; otherwise upgrade.	Devices	11 Sep 2026	Accept risk Reason Review on (optional)
high	LAPTOP-PATEL13 (hannah.patel@northwindtraders.example)	Windows 10 stopped getting security updates on 14 Oct 2025. Extended Security Updates or LTSC can cover it; otherwise upgrade.	Devices	11 Sep 2026	Accept risk Reason Review on (optional)
high	LAPTOP-ROBERTS31 (george.roberts@northwindtraders.example)	Windows 10 stopped getting security updates on 14 Oct 2025. Extended Security Updates or LTSC can cover it; otherwise upgrade.	Devices	11 Sep 2026	Accept risk Reason Review on (optional)
high	LAPTOP-TAYLOR04 (grace.taylor@northwindtraders.example)	Windows 10 stopped getting security updates on 14 Oct 2025. Extended Security Updates or LTSC can cover it; otherwise upgrade.	Devices	11 Sep 2026	Accept risk Reason Review on (optional)
medium	DESK-BAKER27 (ella.baker@northwindtraders.example)	Windows 11 24H2: updates for Home and Pro ended 13 Oct 2026 (Enterprise and Education: 12 Oct 2027).	Devices	11 Sep 2026	Accept risk Reason Review on (optional)
medium	DESK-CLARKE00 (thomas.clarke@northwindtraders.example)	Windows 11 24H2: updates for Home and Pro ended 13 Oct 2026 (Enterprise and Education: 12 Oct 2027).	Devices	11 Sep 2026	Accept risk Reason Review on (optional)
medium	DESK-HILL15 (ruby.hill@northwindtraders.example)	Windows 11 24H2: updates for Home and Pro ended 13 Oct 2026 (Enterprise and Education: 12 Oct 2027).	Devices	11 Sep 2026	Accept risk Reason Review on (optional)
medium	DESK-LEE03 (megan.lee@northwindtraders.example)	Windows 11 24H2: updates for Home and Pro ended 13 Oct 2026 (Enterprise and Education: 12 Oct 2027).	Devices	11 Sep 2026	Accept risk Reason Review on (optional)
medium	DESK-ROBINSON12 (george.robinson@northwindtraders.example)	Windows 11 24H2: updates for Home and Pro ended 13 Oct 2026 (Enterprise and Education: 12 Oct 2027).	Devices	11 Sep 2026	Accept risk Reason Review on (optional)
medium	DESK-TAYLOR06 (ruby.taylor@northwindtraders.example)	Windows 11 24H2: updates for Home and Pro ended 13 Oct 2026 (Enterprise and Education: 12 Oct 2027).	Devices	11 Sep 2026	Accept risk Reason Review on (optional)
medium	DESK-TAYLOR21 (owen.taylor@northwindtraders.example)	Windows 11 24H2: updates for Home and Pro ended 13 Oct 2026 (Enterprise and Education: 12 Oct 2027).	Devices	11 Sep 2026	Accept risk Reason Review on (optional)
medium	DESK-WRIGHT18 (leo.wright@northwindtraders.example)	Windows 11 24H2: updates for Home and Pro ended 13 Oct 2026 (Enterprise and Education: 12 Oct 2027).	Devices	11 Sep 2026	Accept risk Reason Review on (optional)
medium	LAPTOP-CLARK26 (rhys.clark@northwindtraders.example)	Windows 11 24H2: updates for Home and Pro ended 13 Oct 2026 (Enterprise and Education: 12 Oct 2027).	Devices	11 Sep 2026	Accept risk Reason Review on (optional)
medium	LAPTOP-EVANS10 (leo.evans@northwindtraders.example)	Windows 11 24H2: updates for Home and Pro ended 13 Oct 2026 (Enterprise and Education: 12 Oct 2027).	Devices	11 Sep 2026	Accept risk Reason Review on (optional)
medium	LAPTOP-EVANS23 (arthur.evans@northwindtraders.example)	Windows 11 24H2: updates for Home and Pro ended 13 Oct 2026 (Enterprise and Education: 12 Oct 2027).	Devices	11 Sep 2026	Accept risk Reason Review on (optional)
medium	LAPTOP-HUGHES16 (mia.hughes@northwindtraders.example)	Windows 11 24H2: updates for Home and Pro ended 13 Oct 2026 (Enterprise and Education: 12 Oct 2027).	Devices	11 Sep 2026	Accept risk Reason Review on (optional)
medium	LAPTOP-ROBINSON01 (hannah.robinson@northwindtraders.example)	Windows 11 24H2: updates for Home and Pro ended 13 Oct 2026 (Enterprise and Education: 12 Oct 2027).	Devices	11 Sep 2026	Accept risk Reason Review on (optional)
medium	LAPTOP-SCOTT29 (olivia.scott@northwindtraders.example)	Windows 11 24H2: updates for Home and Pro ended 13 Oct 2026 (Enterprise and Education: 12 Oct 2027).	Devices	11 Sep 2026	Accept risk Reason Review on (optional)
medium	LAPTOP-SMITH02 (sophie.smith@northwindtraders.example)	Windows 11 24H2: updates for Home and Pro ended 13 Oct 2026 (Enterprise and Education: 12 Oct 2027).	Devices	11 Sep 2026	Accept risk Reason Review on (optional)
medium	LAPTOP-WATSON11 (amelia.watson@northwindtraders.example)	Windows 11 24H2: updates for Home and Pro ended 13 Oct 2026 (Enterprise and Education: 12 Oct 2027).	Devices	11 Sep 2026	Accept risk Reason Review on (optional)
medium	LAPTOP-WHITE05 (owen.white@northwindtraders.example)	Windows 11 24H2: updates for Home and Pro ended 13 Oct 2026 (Enterprise and Education: 12 Oct 2027).	Devices	11 Sep 2026	Accept risk Reason Review on (optional)
medium	LAPTOP-WILSON08 (grace.wilson@northwindtraders.example)	Windows 11 24H2: updates for Home and Pro ended 13 Oct 2026 (Enterprise and Education: 12 Oct 2027).	Devices	11 Sep 2026	Accept risk Reason Review on (optional)

high	ann.patel@northwindtraders.example	".": Moves to RSS Feeds mail mentioning invoice, payment; Rule name '.' looks deliberately blank	Email	11 Sep 2026	Accept risk Reason Review on (optional)

high	breakglass@northwindtraders.example	No MFA method registered	Identity	11 Sep 2026	Accept risk Reason Review on (optional)
medium	alfie.roberts@northwindtraders.example	No MFA method registered	Identity	11 Sep 2026	Accept risk Reason Review on (optional)
medium	alfie.scott@northwindtraders.example	No MFA method registered	Identity	11 Sep 2026	Accept risk Reason Review on (optional)
medium	carl.jensen@northwindtraders.example	No MFA method registered	Identity	11 Sep 2026	Accept risk Reason Review on (optional)
medium	grace.wilson@northwindtraders.example	No MFA method registered	Identity	11 Sep 2026	Accept risk Reason Review on (optional)
medium	hannah.robinson@northwindtraders.example	No MFA method registered	Identity	11 Sep 2026	Accept risk Reason Review on (optional)
medium	leo.morris@northwindtraders.example	No MFA method registered	Identity	11 Sep 2026	Accept risk Reason Review on (optional)
medium	leo.wright@northwindtraders.example	No MFA method registered	Identity	11 Sep 2026	Accept risk Reason Review on (optional)
medium	maya.martin@northwindtraders.example	No MFA method registered	Identity	11 Sep 2026	Accept risk Reason Review on (optional)
medium	olivia.scott@northwindtraders.example	No MFA method registered	Identity	11 Sep 2026	Accept risk Reason Review on (optional)
medium	owen.taylor@northwindtraders.example	No MFA method registered	Identity	11 Sep 2026	Accept risk Reason Review on (optional)
medium	rhys.clark@northwindtraders.example	No MFA method registered	Identity	11 Sep 2026	Accept risk Reason Review on (optional)
medium	sophie.smith@northwindtraders.example	No MFA method registered	Identity	11 Sep 2026	Accept risk Reason Review on (optional)
medium	thomas.clarke@northwindtraders.example	No MFA method registered	Identity	11 Sep 2026	Accept risk Reason Review on (optional)

medium	ann.patel@northwindtraders.example	Global Administrator; signs in with Authenticator app	Admins	11 Sep 2026	Accept risk Reason Review on (optional)
medium	breakglass@northwindtraders.example	Global Administrator; signs in with no MFA method at all	Admins	11 Sep 2026	Accept risk Reason Review on (optional)

medium	DESK-LEE03	Encrypted, but no recovery key saved in Entra ID	Devices	11 Sep 2026	Accept risk Reason Review on (optional)
medium	LAPTOP-CLARK26	Encrypted, but no recovery key saved in Entra ID	Devices	11 Sep 2026	Accept risk Reason Review on (optional)
medium	LAPTOP-MORRIS19	Encrypted, but no recovery key saved in Entra ID	Devices	11 Sep 2026	Accept risk Reason Review on (optional)
medium	LAPTOP-WATSON11	Encrypted, but no recovery key saved in Entra ID	Devices	11 Sep 2026	Accept risk Reason Review on (optional)
low	DESK-RECEPTION	No recovery key saved in Entra ID (encryption not known)	Devices	11 Sep 2026	Accept risk Reason Review on (optional)

medium	DESK-ROBINSON12 (george.robinson@northwindtraders.example)	Not compliant	Devices	11 Sep 2026	Accept risk Reason Review on (optional)
medium	DESK-WRIGHT18 (leo.wright@northwindtraders.example)	Not compliant	Devices	11 Sep 2026	Accept risk Reason Review on (optional)
medium	LAPTOP-HUGHES (robert.hughes@northwindtraders.example)	Not compliant	Devices	11 Sep 2026	Accept risk Reason Review on (optional)
medium	LAPTOP-SCOTT25 (alfie.scott@northwindtraders.example)	Not compliant	Devices	11 Sep 2026	Accept risk Reason Review on (optional)
medium	LAPTOP-SCOTT29 (olivia.scott@northwindtraders.example)	Not compliant	Devices	11 Sep 2026	Accept risk Reason Review on (optional)
medium	LAPTOP-SMITH07 (olivia.smith@northwindtraders.example)	Not compliant	Devices	11 Sep 2026	Accept risk Reason Review on (optional)

medium	northwindtraders.example	Microsoft 365 DKIM isn't set up (selector2 CNAME missing)	Email	11 Sep 2026	Accept risk Reason Review on (optional)

medium	northwindtraders.example	DMARC is monitor-only (p=none); spoofed mail is still delivered	Email	11 Sep 2026	Accept risk Reason Review on (optional)
low	parked.example	Doesn't receive mail but has no DMARC p=reject record	Email	11 Sep 2026	Accept risk Reason Review on (optional)

medium	iOS/iPadOS	1 enrolled device, no compliance policy assigned	Devices	11 Sep 2026	Accept risk Reason Review on (optional)

medium	robert.hughes@northwindtraders.example	Disabled, holding 1 licence	Licences	11 Sep 2026	Accept risk Reason Review on (optional)

medium	accounts@northwindtraders.example	44.8 GB of 49.5 GB (91%), no archive	Storage	11 Sep 2026	Accept risk Reason Review on (optional)

medium	breakglass@northwindtraders.example	Excluded from "Require MFA for all users"	Identity	11 Sep 2026	Accept risk Reason Review on (optional)

medium	Project Phoenix	Team, only owner is disabled (Robert Hughes)	Groups	11 Sep 2026	Accept risk Reason Review on (optional)
low	Marketing	Microsoft 365 group, only owner is disabled (Robert Hughes)	Groups	11 Sep 2026	Accept risk Reason Review on (optional)
low	Marketing	Microsoft 365 group, no owner	Groups	11 Sep 2026	Accept risk Reason Review on (optional)
low	Provisioned	Microsoft 365 group, owned only by an app (Provisioning app)	Groups	11 Sep 2026	Accept risk Reason Review on (optional)

medium	Some app	App holding Exchange Administrator	Admins	11 Sep 2026	Accept risk Reason Review on (optional)

medium	SharePoint and OneDrive	Anyone links are allowed	Sharing	11 Sep 2026	Accept risk Reason Review on (optional)

medium	Default	Allows mail claiming to be from supplierhub.example past the spam filter	Email	11 Sep 2026	Accept risk Reason Review on (optional)

medium	hannah.robinson@northwindtraders.example	Licensed member, last signed in 11 Apr 2026	Accounts	11 Sep 2026	Accept risk Reason Review on (optional)
medium	sophie.smith@northwindtraders.example	Licensed member, last signed in 26 Jan 2026	Accounts	11 Sep 2026	Accept risk Reason Review on (optional)
medium	thomas.clarke@northwindtraders.example	Licensed member, last signed in 6 Jun 2026	Accounts	11 Sep 2026	Accept risk Reason Review on (optional)
low	g#EXT#@northwindtraders.example	Guest, never signed in, created ?	Accounts	11 Sep 2026	Accept risk Reason Review on (optional)

medium	Tenant	Any user can grant any app access to their mail and files	Apps	11 Sep 2026	Accept risk Reason Review on (optional)

low	Old connector	The 1 credential expired, last on 1 Jan 2025	Apps	11 Sep 2026	Accept risk Reason Review on (optional)

low	Tenant	Users can register apps that nobody reviews	Tenant settings	11 Sep 2026	Accept risk Reason Review on (optional)

low	ann.patel@northwindtraders.example	Reports to Robert Hughes, whose sign-in is blocked	Accounts	11 Sep 2026	Accept risk Reason Review on (optional)

low	DESK-ROBINSON12 (george.robinson@northwindtraders.example)	Last check-in 38 days ago	Devices	11 Sep 2026	Accept risk Reason Review on (optional)
low	LAPTOP-HUGHES (robert.hughes@northwindtraders.example)	Last check-in 45 days ago	Devices	11 Sep 2026	Accept risk Reason Review on (optional)
low	LAPTOP-SCOTT25 (alfie.scott@northwindtraders.example)	Last check-in 38 days ago	Devices	11 Sep 2026	Accept risk Reason Review on (optional)

low	Tenant	Guests can invite other guests	Guests	11 Sep 2026	Accept risk Reason Review on (optional)

low	DESK-RECEPTION	Hybrid joined, not managed by Intune	Devices	11 Sep 2026	Accept risk Reason Review on (optional)

low	northwindtraders.example	No MTA-STS policy, so mail sent to this domain can be forced onto an unencrypted connection	Email	11 Sep 2026	Accept risk Reason Review on (optional)

low	arthur.evans@northwindtraders.example	Second factor is only Mobile phone (SMS or call)	Identity	11 Sep 2026	Accept risk Reason Review on (optional)
low	mia.hughes@northwindtraders.example	Second factor is only Mobile phone (SMS or call)	Identity	11 Sep 2026	Accept risk Reason Review on (optional)
low	zara.jackson@northwindtraders.example	Second factor is only Mobile phone (SMS or call)	Identity	11 Sep 2026	Accept risk Reason Review on (optional)

low	Organisation	SMTP AUTH is allowed	Email	11 Sep 2026	Accept risk Reason Review on (optional)

low	parked.example	Doesn't receive mail but has no "v=spf1 -all" record to stop spoofing	Email	11 Sep 2026	Accept risk Reason Review on (optional)

low	OLD-PC	Windows, last seen 200 days ago	Devices	11 Sep 2026	Accept risk Reason Review on (optional)

low	Microsoft 365 Business Basic	2 of 9 unassigned	Licences	11 Sep 2026	Accept risk Reason Review on (optional)
low	Microsoft 365 Business Premium	3 of 32 unassigned	Licences	11 Sep 2026	Accept risk Reason Review on (optional)

Accepted risks 0

No accepted risks. When something is intentional, accept the risk from its row above and it moves here with the reason.

Latest collection 16 Oct 2026, 04:00 UTC. Severity, check and first-seen filters, sorting and hidden columns stay in the address, so a saved view or a download shows the same rows.

Open findings 108 of 115

Accepted risks 0