Fabrikam Dental Group
fabrikam.onmicrosoft.com
Each row is an account or setting a check flagged. Findings close on their own once the next collection no longer sees the problem. If something is intentional, accept the risk so it moves out of the totals.
Open findings
150
from 40 checks
Critical or high
29
fix these first
New in 30 days
17
first seen since 12 Sep
Open over 90 days
0
Accepted risks
0
left out of the totals
| Severity | Account or item | Detail | First seen | Action |
|---|---|---|---|---|
| critical | breakglass@fabrikam.example | Global Administrator with no MFA method registered | 6 Sep 2026 |
Accept risk |
| low | g#EXT#@fabrikam.example | Exchange Administrator: MFA registration unknown | 6 Sep 2026 |
Accept risk |
| high | breakglass@fabrikam.example | Global Administrator: excluded from Require MFA for all users | 6 Sep 2026 |
Accept risk |
| high | DESK-MOORE18 (ava.moore@fabrikam.example) | Windows disk isn't encrypted | 6 Sep 2026 |
Accept risk |
| high | DESK-ROBINSON51 (owen.robinson@fabrikam.example) | Windows disk isn't encrypted | 11 Oct 2026 |
Accept risk |
| high | LAPTOP-OKAFOR (ben.okafor@fabrikam.example) | Windows disk isn't encrypted | 6 Sep 2026 |
Accept risk |
| high | LAPTOP-ROBINSON07 (thomas.robinson@fabrikam.example) | Windows disk isn't encrypted | 6 Sep 2026 |
Accept risk |
| high | LAPTOP-WARD29 (jack.ward@fabrikam.example) | Windows disk isn't encrypted | 6 Sep 2026 |
Accept risk |
| high | LAPTOP-WATSON40 (lily.watson@fabrikam.example) | Windows disk isn't encrypted | 6 Sep 2026 |
Accept risk |
| high | fabrikam.example | Set domain authentication by mallory.quinn@fabrikam.example on 9 Oct 2026 | 6 Sep 2026 |
Accept risk |
| high | anna.kowalski@fabrikam.example | Mailbox forwarding to anna.kowalski@homemail.example (keeps a copy) | 6 Sep 2026 |
Accept risk |
| high | anna.kowalski@fabrikam.example | Inbox rule "Copy to home" forwards to anna.kowalski.home@homemail.example | 6 Sep 2026 |
Accept risk |
| high | rhys.hall@fabrikam.example | Mailbox forwarding to rhys.hall@homemail.example (doesn't keep a copy) | 11 Oct 2026 |
Accept risk |
| high | rhys.walker@fabrikam.example | Mailbox forwarding to rhys.walker@homemail.example (doesn't keep a copy) | 11 Oct 2026 |
Accept risk |
| high | thomas.robinson@fabrikam.example | Inbox rule "Invoices to bookkeeper" forwards to bookkeeping@ledgerline.example | 6 Sep 2026 |
Accept risk |
| high | g#EXT#@fabrikam.example | Guest holding Exchange Administrator | 6 Sep 2026 |
Accept risk |
| high | Tenant | No enabled policy blocks legacy authentication for all users | 6 Sep 2026 |
Accept risk |
| high | Mail Sync Pro | Mail.Read (application permission; unverified publisher) | 6 Sep 2026 |
Accept risk |
| high | accounts@hollis-partners.example on Finance | Full Control, given Full Control directly | 6 Sep 2026 |
Accept risk |
| high | Marketing | No enabled owner (Microsoft 365 group) | 6 Sep 2026 |
Accept risk |
| high | Old Projects | No enabled owner (site administrators) | 6 Sep 2026 |
Accept risk |
| low | Practice Management | One owner (Microsoft 365 group) | 6 Sep 2026 |
Accept risk |
| low | Staff Intranet | One owner (site administrators) | 6 Sep 2026 |
Accept risk |
| high | LAPTOP-HARRIS31 (noah.harris@fabrikam.example) | Windows 10 stopped getting security updates on 14 Oct 2025. Extended Security Updates or LTSC can cover it; otherwise upgrade. | 6 Sep 2026 |
Accept risk |
| high | LAPTOP-JACKSON49 (chloe.jackson@fabrikam.example) | Windows 10 stopped getting security updates on 14 Oct 2025. Extended Security Updates or LTSC can cover it; otherwise upgrade. | 6 Sep 2026 |
Accept risk |
| high | LAPTOP-OKAFOR (ben.okafor@fabrikam.example) | Windows 10 stopped getting security updates on 14 Oct 2025. Extended Security Updates or LTSC can cover it; otherwise upgrade. | 6 Sep 2026 |
Accept risk |
| high | LAPTOP-SMITH13 (owen.smith@fabrikam.example) | Windows 10 stopped getting security updates on 14 Oct 2025. Extended Security Updates or LTSC can cover it; otherwise upgrade. | 6 Sep 2026 |
Accept risk |
| high | LAPTOP-WALKER04 (rhys.walker@fabrikam.example) | Windows 10 stopped getting security updates on 14 Oct 2025. Extended Security Updates or LTSC can cover it; otherwise upgrade. | 6 Sep 2026 |
Accept risk |
| high | LAPTOP-WATSON40 (lily.watson@fabrikam.example) | Windows 10 stopped getting security updates on 14 Oct 2025. Extended Security Updates or LTSC can cover it; otherwise upgrade. | 6 Sep 2026 |
Accept risk |
| high | LAPTOP-WOOD22 (william.wood@fabrikam.example) | Windows 10 stopped getting security updates on 14 Oct 2025. Extended Security Updates or LTSC can cover it; otherwise upgrade. | 6 Sep 2026 |
Accept risk |
| low | DESK-ALLEN09 (thomas.allen@fabrikam.example) | Windows 11 24H2: updates for Home and Pro end 13 Oct 2026. | 6 Sep 2026 |
Accept risk |
| low | DESK-CLARK06 (ruby.clark@fabrikam.example) | Windows 11 24H2: updates for Home and Pro end 13 Oct 2026. | 6 Sep 2026 |
Accept risk |
| low | DESK-HARRISON21 (leo.harrison@fabrikam.example) | Windows 11 24H2: updates for Home and Pro end 13 Oct 2026. | 6 Sep 2026 |
Accept risk |
| low | DESK-KHAN30 (owen.khan@fabrikam.example) | Windows 11 24H2: updates for Home and Pro end 13 Oct 2026. | 6 Sep 2026 |
Accept risk |
| low | DESK-KING24 (megan.king@fabrikam.example) | Windows 11 24H2: updates for Home and Pro end 13 Oct 2026. | 6 Sep 2026 |
Accept risk |
| low | DESK-MOORE18 (ava.moore@fabrikam.example) | Windows 11 24H2: updates for Home and Pro end 13 Oct 2026. | 6 Sep 2026 |
Accept risk |
| low | DESK-ROBERTS45 (jack.roberts@fabrikam.example) | Windows 11 24H2: updates for Home and Pro end 13 Oct 2026. | 6 Sep 2026 |
Accept risk |
| low | DESK-ROBINSON51 (owen.robinson@fabrikam.example) | Windows 11 24H2: updates for Home and Pro end 13 Oct 2026. | 11 Oct 2026 |
Accept risk |
| low | DESK-WHITE42 (lily.white@fabrikam.example) | Windows 11 24H2: updates for Home and Pro end 13 Oct 2026. | 6 Sep 2026 |
Accept risk |
| low | DESK-WILLIAMS27 (arthur.williams@fabrikam.example) | Windows 11 24H2: updates for Home and Pro end 13 Oct 2026. | 6 Sep 2026 |
Accept risk |
| low | DESK-WOOD39 (ruby.wood@fabrikam.example) | Windows 11 24H2: updates for Home and Pro end 13 Oct 2026. | 6 Sep 2026 |
Accept risk |
| low | LAPTOP-BROWN01 (aisha.brown@fabrikam.example) | Windows 11 24H2: updates for Home and Pro end 13 Oct 2026. | 6 Sep 2026 |
Accept risk |
| low | LAPTOP-DAVIES38 (ruby.davies@fabrikam.example) | Windows 11 24H2: updates for Home and Pro end 13 Oct 2026. | 6 Sep 2026 |
Accept risk |
| low | LAPTOP-GREEN32 (megan.green@fabrikam.example) | Windows 11 24H2: updates for Home and Pro end 13 Oct 2026. | 6 Sep 2026 |
Accept risk |
| low | LAPTOP-JOHNSON47 (thomas.johnson@fabrikam.example) | Windows 11 24H2: updates for Home and Pro end 13 Oct 2026. | 6 Sep 2026 |
Accept risk |
| low | LAPTOP-JONES34 (ethan.jones@fabrikam.example) | Windows 11 24H2: updates for Home and Pro end 13 Oct 2026. | 6 Sep 2026 |
Accept risk |
| low | LAPTOP-KHAN35 (lily.khan@fabrikam.example) | Windows 11 24H2: updates for Home and Pro end 13 Oct 2026. | 6 Sep 2026 |
Accept risk |
| low | LAPTOP-LEE02 (jack.lee@fabrikam.example) | Windows 11 24H2: updates for Home and Pro end 13 Oct 2026. | 6 Sep 2026 |
Accept risk |
| low | LAPTOP-LEE25 (arthur.lee@fabrikam.example) | Windows 11 24H2: updates for Home and Pro end 13 Oct 2026. | 6 Sep 2026 |
Accept risk |
| low | LAPTOP-ROBERTS41 (henry.roberts@fabrikam.example) | Windows 11 24H2: updates for Home and Pro end 13 Oct 2026. | 6 Sep 2026 |
Accept risk |
| low | LAPTOP-SCOTT17 (owen.scott@fabrikam.example) | Windows 11 24H2: updates for Home and Pro end 13 Oct 2026. | 6 Sep 2026 |
Accept risk |
| low | LAPTOP-SCOTT19 (isla.scott@fabrikam.example) | Windows 11 24H2: updates for Home and Pro end 13 Oct 2026. | 6 Sep 2026 |
Accept risk |
| low | LAPTOP-SMITH50 (oscar.smith@fabrikam.example) | Windows 11 24H2: updates for Home and Pro end 13 Oct 2026. | 11 Oct 2026 |
Accept risk |
| low | LAPTOP-TAYLOR43 (olivia.taylor@fabrikam.example) | Windows 11 24H2: updates for Home and Pro end 13 Oct 2026. | 6 Sep 2026 |
Accept risk |
| low | LAPTOP-THOMAS08 (ava.thomas@fabrikam.example) | Windows 11 24H2: updates for Home and Pro end 13 Oct 2026. | 6 Sep 2026 |
Accept risk |
| low | LAPTOP-TURNER37 (callum.turner@fabrikam.example) | Windows 11 24H2: updates for Home and Pro end 13 Oct 2026. | 6 Sep 2026 |
Accept risk |
| low | LAPTOP-WALKER10 (george.walker@fabrikam.example) | Windows 11 24H2: updates for Home and Pro end 13 Oct 2026. | 6 Sep 2026 |
Accept risk |
| low | LAPTOP-WARD29 (jack.ward@fabrikam.example) | Windows 11 24H2: updates for Home and Pro end 13 Oct 2026. | 6 Sep 2026 |
Accept risk |
| low | LAPTOP-WILLIAMS20 (priya.williams@fabrikam.example) | Windows 11 24H2: updates for Home and Pro end 13 Oct 2026. | 6 Sep 2026 |
Accept risk |
| high | anna.kowalski@fabrikam.example | ".": Moves to RSS Feeds mail mentioning invoice, payment; Rule name '.' looks deliberately blank | 6 Sep 2026 |
Accept risk |
| high | breakglass@fabrikam.example | No MFA method registered | 6 Sep 2026 |
Accept risk |
| medium | aaron.smith@fabrikam.example | No MFA method registered | 6 Sep 2026 |
Accept risk |
| medium | aisha.brown@fabrikam.example | No MFA method registered | 6 Sep 2026 |
Accept risk |
| medium | amelia.khan@fabrikam.example | No MFA method registered | 6 Sep 2026 |
Accept risk |
| medium | arthur.williams@fabrikam.example | No MFA method registered | 6 Sep 2026 |
Accept risk |
| medium | ava.jackson@fabrikam.example | No MFA method registered | 6 Sep 2026 |
Accept risk |
| medium | ava.moore@fabrikam.example | No MFA method registered | 6 Sep 2026 |
Accept risk |
| medium | ava.thomas@fabrikam.example | No MFA method registered | 6 Sep 2026 |
Accept risk |
| medium | carl.svensson@fabrikam.example | No MFA method registered | 6 Sep 2026 |
Accept risk |
| medium | chloe.jackson@fabrikam.example | No MFA method registered | 6 Sep 2026 |
Accept risk |
| medium | george.williams@fabrikam.example | No MFA method registered | 6 Sep 2026 |
Accept risk |
| medium | henry.roberts@fabrikam.example | No MFA method registered | 6 Sep 2026 |
Accept risk |
| medium | isla.scott@fabrikam.example | No MFA method registered | 6 Sep 2026 |
Accept risk |
| medium | jack.lee@fabrikam.example | No MFA method registered | 6 Sep 2026 |
Accept risk |
| medium | jack.roberts@fabrikam.example | No MFA method registered | 6 Sep 2026 |
Accept risk |
| medium | lily.khan@fabrikam.example | No MFA method registered | 6 Sep 2026 |
Accept risk |
| medium | lily.watson@fabrikam.example | No MFA method registered | 6 Sep 2026 |
Accept risk |
| medium | lily.white@fabrikam.example | No MFA method registered | 6 Sep 2026 |
Accept risk |
| medium | megan.king@fabrikam.example | No MFA method registered | 6 Sep 2026 |
Accept risk |
| medium | noah.wood@fabrikam.example | No MFA method registered | 6 Sep 2026 |
Accept risk |
| medium | olivia.taylor@fabrikam.example | No MFA method registered | 6 Sep 2026 |
Accept risk |
| medium | owen.scott@fabrikam.example | No MFA method registered | 6 Sep 2026 |
Accept risk |
| medium | rhys.walker@fabrikam.example | No MFA method registered | 6 Sep 2026 |
Accept risk |
| medium | ruby.davies@fabrikam.example | No MFA method registered | 6 Sep 2026 |
Accept risk |
| medium | ruby.wood@fabrikam.example | No MFA method registered | 6 Sep 2026 |
Accept risk |
| medium | thomas.johnson@fabrikam.example | No MFA method registered | 6 Sep 2026 |
Accept risk |
| medium | zara.edwards@fabrikam.example | No MFA method registered | 6 Sep 2026 |
Accept risk |
| medium | anna.kowalski@fabrikam.example | Global Administrator; signs in with Authenticator app | 6 Sep 2026 |
Accept risk |
| medium | breakglass@fabrikam.example | Global Administrator; signs in with no MFA method at all | 6 Sep 2026 |
Accept risk |
| medium | holiday.jpg (OneDrive of anna.kowalski@fabrikam.example) | Anyone can view | 6 Sep 2026 |
Accept risk |
| medium | Open day flyer.pdf (Marketing / Documents) | Anyone can view, link never expires | 6 Sep 2026 |
Accept risk |
| medium | DESK-LEWIS12 (william.lewis@fabrikam.example) | Not compliant | 6 Sep 2026 |
Accept risk |
| medium | DESK-MOORE18 (ava.moore@fabrikam.example) | Not compliant | 6 Sep 2026 |
Accept risk |
| medium | DESK-ROBINSON51 (owen.robinson@fabrikam.example) | Not compliant | 11 Oct 2026 |
Accept risk |
| medium | LAPTOP-DAVIES38 (ruby.davies@fabrikam.example) | Not compliant | 6 Sep 2026 |
Accept risk |
| medium | LAPTOP-LEE25 (arthur.lee@fabrikam.example) | Not compliant | 6 Sep 2026 |
Accept risk |
| medium | LAPTOP-OKAFOR (ben.okafor@fabrikam.example) | Not compliant | 6 Sep 2026 |
Accept risk |
| medium | LAPTOP-ROBINSON07 (thomas.robinson@fabrikam.example) | Not compliant | 6 Sep 2026 |
Accept risk |
| medium | LAPTOP-WARD29 (jack.ward@fabrikam.example) | Not compliant | 6 Sep 2026 |
Accept risk |
| medium | LAPTOP-WATSON40 (lily.watson@fabrikam.example) | Not compliant | 6 Sep 2026 |
Accept risk |
| medium | fabrikam.example | Microsoft 365 DKIM isn't set up (selector2 CNAME missing) | 6 Sep 2026 |
Accept risk |
| medium | fabrikam.example | DMARC is monitor-only (p=none); spoofed mail is still delivered | 6 Sep 2026 |
Accept risk |
| low | parked.example | Doesn't receive mail but has no DMARC p=reject record | 6 Sep 2026 |
Accept risk |
| medium | ben.okafor@fabrikam.example | Disabled, holding 1 licence | 6 Sep 2026 |
Accept risk |
| medium | accounts@fabrikam.example | 44.8 GB of 49.5 GB (91%), no archive | 6 Sep 2026 |
Accept risk |
| medium | aisha.brown@fabrikam.example | 47.2 GB of 49.5 GB (95%), no archive | 11 Oct 2026 |
Accept risk |
| medium | thomas.robinson@fabrikam.example | 45.6 GB of 49.5 GB (92%), no archive | 11 Oct 2026 |
Accept risk |
| medium | breakglass@fabrikam.example | Excluded from "Require MFA for all users" | 6 Sep 2026 |
Accept risk |
| medium | Budget.xlsx (Finance / Documents) | Can be edited by accountant@hargreaves-partners.example | 11 Oct 2026 |
Accept risk |
| medium | Lab dockets (Patient Records / Documents) | Can be edited by orders@dentallab.example | 6 Sep 2026 |
Accept risk |
| medium | Project Phoenix | Team, only owner is disabled (Ben Okafor) | 6 Sep 2026 |
Accept risk |
| low | Marketing | Microsoft 365 group, only owner is disabled (Ben Okafor) | 6 Sep 2026 |
Accept risk |
| low | Marketing | Microsoft 365 group, no owner | 6 Sep 2026 |
Accept risk |
| low | Provisioned | Microsoft 365 group, owned only by an app (Provisioning app) | 6 Sep 2026 |
Accept risk |
| medium | Some app | App holding Exchange Administrator | 6 Sep 2026 |
Accept risk |
| medium | SharePoint and OneDrive | Anyone links are allowed | 6 Sep 2026 |
Accept risk |
| medium | Tenant SharePoint storage | 88% of about 1.45 TB used (1 TB + 10 GB × 46 licences) | 11 Oct 2026 |
Accept risk |
| low | https://fabrikam.sharepoint.com/sites/finance | 117.5 GB, of which 3.0 GB in the recycle bin and 7.6 GB older versions | 11 Oct 2026 |
Accept risk |
| low | https://fabrikam.sharepoint.com/sites/imaging | 483.2 GB, of which 46.0 GB in the recycle bin and 33.3 GB older versions | 11 Oct 2026 |
Accept risk |
| low | https://fabrikam.sharepoint.com/sites/marketing | 65.3 GB, of which 1.0 GB in the recycle bin and 4.9 GB older versions | 11 Oct 2026 |
Accept risk |
| low | https://fabrikam.sharepoint.com/sites/patient-records | 352.6 GB, of which 12.0 GB in the recycle bin and 25.2 GB older versions | 11 Oct 2026 |
Accept risk |
| low | https://fabrikam.sharepoint.com/sites/practice | 182.8 GB, of which 6.0 GB in the recycle bin and 21.1 GB older versions | 11 Oct 2026 |
Accept risk |
| medium | aaron.smith@fabrikam.example | Licensed member, last signed in 22 Apr 2026 | 6 Sep 2026 |
Accept risk |
| medium | aisha.brown@fabrikam.example | Licensed member, last signed in 6 Mar 2026 | 6 Sep 2026 |
Accept risk |
| medium | jack.lee@fabrikam.example | Licensed member, last signed in 3 Jun 2026 | 6 Sep 2026 |
Accept risk |
| medium | noah.wood@fabrikam.example | Licensed member, last signed in 6 Feb 2026 | 6 Sep 2026 |
Accept risk |
| medium | rhys.walker@fabrikam.example | Licensed member, last signed in 4 Jun 2026 | 6 Sep 2026 |
Accept risk |
| medium | zara.edwards@fabrikam.example | Licensed member, last signed in 8 Jul 2026 | 6 Sep 2026 |
Accept risk |
| low | g#EXT#@fabrikam.example | Guest, never signed in, created ? | 6 Sep 2026 |
Accept risk |
| medium | Tenant | Any user can grant any app access to their mail and files | 6 Sep 2026 |
Accept risk |
| low | Old connector | The 1 credential expired, last on 1 Jan 2025 | 6 Sep 2026 |
Accept risk |
| low | Tenant | Users can register apps that nobody reviews | 6 Sep 2026 |
Accept risk |
| low | anna.kowalski@fabrikam.example | Reports to Ben Okafor, whose sign-in is blocked | 6 Sep 2026 |
Accept risk |
| low | DESK-LEWIS12 (william.lewis@fabrikam.example) | Last check-in 38 days ago | 6 Sep 2026 |
Accept risk |
| low | DESK-ROBINSON51 (owen.robinson@fabrikam.example) | Last check-in 38 days ago | 11 Oct 2026 |
Accept risk |
| low | LAPTOP-DAVIES38 (ruby.davies@fabrikam.example) | Last check-in 38 days ago | 6 Sep 2026 |
Accept risk |
| low | LAPTOP-LEE25 (arthur.lee@fabrikam.example) | Last check-in 38 days ago | 6 Sep 2026 |
Accept risk |
| low | LAPTOP-OKAFOR (ben.okafor@fabrikam.example) | Last check-in 45 days ago | 6 Sep 2026 |
Accept risk |
| low | Tenant | Guests can invite other guests | 6 Sep 2026 |
Accept risk |
| low | DESK-RECEPTION | Hybrid joined, not managed by Intune | 6 Sep 2026 |
Accept risk |
| low | fabrikam.example | No MTA-STS policy, so mail sent to this domain can be forced onto an unencrypted connection | 6 Sep 2026 |
Accept risk |
| low | george.baker@fabrikam.example | Second factor is only Mobile phone (SMS or call) | 6 Sep 2026 |
Accept risk |
| low | owen.robinson@fabrikam.example | Second factor is only Mobile phone (SMS or call) | 11 Oct 2026 |
Accept risk |
| low | owen.turner@fabrikam.example | Second factor is only Mobile phone (SMS or call) | 6 Sep 2026 |
Accept risk |
| low | thomas.allen@fabrikam.example | Second factor is only Mobile phone (SMS or call) | 6 Sep 2026 |
Accept risk |
| low | Organisation | SMTP AUTH is allowed | 6 Sep 2026 |
Accept risk |
| low | parked.example | Doesn't receive mail but has no "v=spf1 -all" record to stop spoofing | 6 Sep 2026 |
Accept risk |
| low | OLD-PC | Windows, last seen 200 days ago | 6 Sep 2026 |
Accept risk |
| low | Microsoft 365 Business Basic | 2 of 13 unassigned | 6 Sep 2026 |
Accept risk |
| low | Microsoft 365 Business Premium | 3 of 46 unassigned | 6 Sep 2026 |
Accept risk |
Accepted risks 0
No accepted risks. When something is intentional, accept the risk from its row above and it moves here with the reason.
Latest collection 11 Oct 2026, 20:32 UTC. Severity, check and first-seen filters, sorting and hidden columns stay in the address, so a saved view or a download shows the same rows.