Harbour ITMenu

Powered by Office Sentry 2.3.1

You're in the demo. Three fictional clients with made-up people. Look around freely: nothing can be changed, and it all resets every night.Get Office Sentry
Clients/Fabrikam Dental Group

Fabrikam Dental Group

fabrikam.onmicrosoft.com
Recommended projects
Download PDFXLSX

Each row is an account or setting a check flagged. Findings close on their own once the next collection no longer sees the problem. If something is intentional, accept the risk so it moves out of the totals.

Open findings 34 of 163

129 to review CSV
Severity DetailCategoryFirst seen Action
low Exchange Administrator: MFA registration unknownAdmins11 Sep 2026
Accept risk
low One owner (Microsoft 365 group)Sharing11 Sep 2026
Accept risk
low One owner (site administrators and owners group)Sharing11 Sep 2026
Accept risk
low No recovery key saved in Entra ID (encryption not known)Devices11 Sep 2026
Accept risk
low Doesn't receive mail but has no DMARC p=reject recordEmail11 Sep 2026
Accept risk
low Microsoft 365 group, only owner is disabled (Ben Okafor)Groups11 Sep 2026
Accept risk
low Microsoft 365 group, no ownerGroups11 Sep 2026
Accept risk
low Microsoft 365 group, owned only by an app (Provisioning app)Groups11 Sep 2026
Accept risk
low 117.5 GB, of which 3.0 GB in the recycle bin and 7.6 GB older versionsStorage16 Oct 2026
Accept risk
low 483.2 GB, of which 46.0 GB in the recycle bin and 33.3 GB older versionsStorage16 Oct 2026
Accept risk
low 65.3 GB, of which 1.0 GB in the recycle bin and 4.9 GB older versionsStorage16 Oct 2026
Accept risk
low 352.6 GB, of which 12.0 GB in the recycle bin and 25.2 GB older versionsStorage16 Oct 2026
Accept risk
low 182.8 GB, of which 6.0 GB in the recycle bin and 21.1 GB older versionsStorage16 Oct 2026
Accept risk
low Guest, never signed in, created ?Accounts11 Sep 2026
Accept risk
low The 1 credential expired, last on 1 Jan 2025Apps11 Sep 2026
Accept risk
low Users can register apps that nobody reviewsTenant settings11 Sep 2026
Accept risk
low Reports to Ben Okafor, whose sign-in is blockedAccounts11 Sep 2026
Accept risk
low Last check-in 38 days agoDevices11 Sep 2026
Accept risk
low Last check-in 38 days agoDevices16 Oct 2026
Accept risk
low Last check-in 38 days agoDevices11 Sep 2026
Accept risk
low Last check-in 38 days agoDevices11 Sep 2026
Accept risk
low Last check-in 45 days agoDevices11 Sep 2026
Accept risk
low Guests can invite other guestsGuests11 Sep 2026
Accept risk
low Hybrid joined, not managed by IntuneDevices11 Sep 2026
Accept risk
low No MTA-STS policy, so mail sent to this domain can be forced onto an unencrypted connectionEmail11 Sep 2026
Accept risk
low Second factor is only Mobile phone (SMS or call)Identity11 Sep 2026
Accept risk
low Second factor is only Mobile phone (SMS or call)Identity16 Oct 2026
Accept risk
low Second factor is only Mobile phone (SMS or call)Identity11 Sep 2026
Accept risk
low Second factor is only Mobile phone (SMS or call)Identity11 Sep 2026
Accept risk
low SMTP AUTH is allowedEmail11 Sep 2026
Accept risk
low Doesn't receive mail but has no "v=spf1 -all" record to stop spoofingEmail11 Sep 2026
Accept risk
low Windows, last seen 200 days agoDevices11 Sep 2026
Accept risk
low 2 of 13 unassignedLicences11 Sep 2026
Accept risk
low 3 of 46 unassignedLicences11 Sep 2026
Accept risk

Accepted risks 0

No accepted risks. When something is intentional, accept the risk from its row above and it moves here with the reason.

Latest collection 16 Oct 2026, 04:00 UTC. Severity, check and first-seen filters, sorting and hidden columns stay in the address, so a saved view or a download shows the same rows.