Northwind Traders
northwindtraders.onmicrosoft.com
Each row is an account or setting a check flagged. Findings close on their own once the next collection no longer sees the problem. If something is intentional, accept the risk so it moves out of the totals.
Open findings
107
from 39 checks
Critical or high
24
fix these first
New in 30 days
7
first seen since 11 Sep
Open over 90 days
0
Accepted risks
0
left out of the totals
| Severity | Account or item | Detail | Category | First seen | Action |
|---|---|---|---|---|---|
| medium | Brand assets (Marketing / Documents) | Anyone can view, link never expires | Sharing | 6 Sep 2026 |
Accept risk |
| medium | holiday.jpg (OneDrive of ann.patel@northwindtraders.example) | Anyone can view | Sharing | 6 Sep 2026 |
Accept risk |
| medium | alfie.roberts@northwindtraders.example | No MFA method registered | Identity | 6 Sep 2026 |
Accept risk |
| medium | alfie.scott@northwindtraders.example | No MFA method registered | Identity | 6 Sep 2026 |
Accept risk |
| medium | carl.jensen@northwindtraders.example | No MFA method registered | Identity | 6 Sep 2026 |
Accept risk |
| medium | grace.wilson@northwindtraders.example | No MFA method registered | Identity | 6 Sep 2026 |
Accept risk |
| medium | hannah.robinson@northwindtraders.example | No MFA method registered | Identity | 6 Sep 2026 |
Accept risk |
| medium | leo.morris@northwindtraders.example | No MFA method registered | Identity | 6 Sep 2026 |
Accept risk |
| medium | leo.wright@northwindtraders.example | No MFA method registered | Identity | 6 Sep 2026 |
Accept risk |
| medium | maya.martin@northwindtraders.example | No MFA method registered | Identity | 6 Sep 2026 |
Accept risk |
| medium | olivia.scott@northwindtraders.example | No MFA method registered | Identity | 6 Sep 2026 |
Accept risk |
| medium | owen.taylor@northwindtraders.example | No MFA method registered | Identity | 6 Sep 2026 |
Accept risk |
| medium | rhys.clark@northwindtraders.example | No MFA method registered | Identity | 6 Sep 2026 |
Accept risk |
| medium | sophie.smith@northwindtraders.example | No MFA method registered | Identity | 6 Sep 2026 |
Accept risk |
| medium | thomas.clarke@northwindtraders.example | No MFA method registered | Identity | 6 Sep 2026 |
Accept risk |
| medium | ann.patel@northwindtraders.example | Global Administrator; signs in with Authenticator app | Admins | 6 Sep 2026 |
Accept risk |
| medium | breakglass@northwindtraders.example | Global Administrator; signs in with no MFA method at all | Admins | 6 Sep 2026 |
Accept risk |
| medium | DESK-ROBINSON12 (george.robinson@northwindtraders.example) | Not compliant | Devices | 6 Sep 2026 |
Accept risk |
| medium | DESK-WRIGHT18 (leo.wright@northwindtraders.example) | Not compliant | Devices | 6 Sep 2026 |
Accept risk |
| medium | LAPTOP-HUGHES (robert.hughes@northwindtraders.example) | Not compliant | Devices | 6 Sep 2026 |
Accept risk |
| medium | LAPTOP-SCOTT25 (alfie.scott@northwindtraders.example) | Not compliant | Devices | 6 Sep 2026 |
Accept risk |
| medium | LAPTOP-SCOTT29 (olivia.scott@northwindtraders.example) | Not compliant | Devices | 6 Sep 2026 |
Accept risk |
| medium | LAPTOP-SMITH07 (olivia.smith@northwindtraders.example) | Not compliant | Devices | 6 Sep 2026 |
Accept risk |
| medium | northwindtraders.example | Microsoft 365 DKIM isn't set up (selector2 CNAME missing) | 6 Sep 2026 |
Accept risk |
|
| medium | northwindtraders.example | DMARC is monitor-only (p=none); spoofed mail is still delivered | 6 Sep 2026 |
Accept risk |
|
| medium | robert.hughes@northwindtraders.example | Disabled, holding 1 licence | Licences | 6 Sep 2026 |
Accept risk |
| medium | accounts@northwindtraders.example | 44.8 GB of 49.5 GB (91%), no archive | Storage | 6 Sep 2026 |
Accept risk |
| medium | hannah.robinson@northwindtraders.example | 47.2 GB of 49.5 GB (95%), no archive | Storage | 11 Oct 2026 |
Accept risk |
| medium | olivia.smith@northwindtraders.example | 45.6 GB of 49.5 GB (92%), no archive | Storage | 11 Oct 2026 |
Accept risk |
| medium | breakglass@northwindtraders.example | Excluded from "Require MFA for all users" | Identity | 6 Sep 2026 |
Accept risk |
| medium | Year end/Draft accounts FY26.xlsx (Clients / Documents) | Can be edited by partner@mason-legal.example | Sharing | 11 Oct 2026 |
Accept risk |
| medium | Project Phoenix | Team, only owner is disabled (Robert Hughes) | Groups | 6 Sep 2026 |
Accept risk |
| medium | Some app | App holding Exchange Administrator | Admins | 6 Sep 2026 |
Accept risk |
| medium | SharePoint and OneDrive | Anyone links are allowed | Sharing | 6 Sep 2026 |
Accept risk |
| medium | hannah.robinson@northwindtraders.example | Licensed member, last signed in 7 Apr 2026 | Accounts | 6 Sep 2026 |
Accept risk |
| medium | sophie.smith@northwindtraders.example | Licensed member, last signed in 21 Jan 2026 | Accounts | 6 Sep 2026 |
Accept risk |
| medium | thomas.clarke@northwindtraders.example | Licensed member, last signed in 2 Jun 2026 | Accounts | 6 Sep 2026 |
Accept risk |
| medium | Tenant | Any user can grant any app access to their mail and files | Apps | 6 Sep 2026 |
Accept risk |
Accepted risks 0
No accepted risks. When something is intentional, accept the risk from its row above and it moves here with the reason.
Latest collection 11 Oct 2026, 20:31 UTC. Severity, check and first-seen filters, sorting and hidden columns stay in the address, so a saved view or a download shows the same rows.