Northwind Traders
northwindtraders.onmicrosoft.com
Each row is an account or setting a check flagged. Findings close on their own once the next collection no longer sees the problem. If something is intentional, accept the risk so it moves out of the totals.
Open findings
107
from 39 checks
Critical or high
24
fix these first
New in 30 days
7
first seen since 12 Sep
Open over 90 days
0
Accepted risks
0
left out of the totals
| Severity | Detail | Category | First seen | Action |
|---|---|---|---|---|
| high | Global Administrator: excluded from Require MFA for all users | Admins | 6 Sep 2026 |
Accept risk |
| high | Anyone can edit | Sharing | 11 Oct 2026 |
Accept risk |
| high | Windows disk isn't encrypted | Devices | 6 Sep 2026 |
Accept risk |
| high | Windows disk isn't encrypted | Devices | 6 Sep 2026 |
Accept risk |
| high | Windows disk isn't encrypted | Devices | 6 Sep 2026 |
Accept risk |
| high | Windows disk isn't encrypted | Devices | 6 Sep 2026 |
Accept risk |
| high | Set domain authentication by mallory.price@northwindtraders.example on 9 Oct 2026 | Identity | 6 Sep 2026 |
Accept risk |
| high | Mailbox forwarding to ann.patel@homemail.example (keeps a copy) | 6 Sep 2026 |
Accept risk |
|
| high | Inbox rule "Copy to home" forwards to ann.patel.home@homemail.example | 6 Sep 2026 |
Accept risk |
|
| high | Mailbox forwarding to grace.taylor@homemail.example (doesn't keep a copy) | 11 Oct 2026 |
Accept risk |
|
| high | Inbox rule "Invoices to bookkeeper" forwards to bookkeeping@ledgerline.example | 6 Sep 2026 |
Accept risk |
|
| high | Guest holding Exchange Administrator | Admins | 6 Sep 2026 |
Accept risk |
| high | No enabled policy blocks legacy authentication for all users | Identity | 6 Sep 2026 |
Accept risk |
| high | Mail.Read (application permission; unverified publisher) | Apps | 6 Sep 2026 |
Accept risk |
| high | Full Control, given Full Control directly | Sharing | 6 Sep 2026 |
Accept risk |
| high | No enabled owner (Microsoft 365 group) | Sharing | 6 Sep 2026 |
Accept risk |
| high | Windows 10 stopped getting security updates on 14 Oct 2025. Extended Security Updates or LTSC can cover it; otherwise upgrade. | Devices | 6 Sep 2026 |
Accept risk |
| high | Windows 10 stopped getting security updates on 14 Oct 2025. Extended Security Updates or LTSC can cover it; otherwise upgrade. | Devices | 6 Sep 2026 |
Accept risk |
| high | Windows 10 stopped getting security updates on 14 Oct 2025. Extended Security Updates or LTSC can cover it; otherwise upgrade. | Devices | 6 Sep 2026 |
Accept risk |
| high | Windows 10 stopped getting security updates on 14 Oct 2025. Extended Security Updates or LTSC can cover it; otherwise upgrade. | Devices | 6 Sep 2026 |
Accept risk |
| high | Windows 10 stopped getting security updates on 14 Oct 2025. Extended Security Updates or LTSC can cover it; otherwise upgrade. | Devices | 6 Sep 2026 |
Accept risk |
| high | ".": Moves to RSS Feeds mail mentioning invoice, payment; Rule name '.' looks deliberately blank | 6 Sep 2026 |
Accept risk |
|
| high | No MFA method registered | Identity | 6 Sep 2026 |
Accept risk |
Accepted risks 0
No accepted risks. When something is intentional, accept the risk from its row above and it moves here with the reason.
Latest collection 11 Oct 2026, 20:31 UTC. Severity, check and first-seen filters, sorting and hidden columns stay in the address, so a saved view or a download shows the same rows.