Contoso Legal LLP
contoso.onmicrosoft.com
Changes
230
14 key, 216 in detail reports
New findings
5
new or come back
Fixed findings
1
no longer found
Secure Score
68%
+7 pts since 11 Sep 2026
Key figures
| Measure | 11 Sep 2026 | Now |
|---|---|---|
| Secure Score | 61% | 68% +7 |
| Users with MFA | 72.2% | 80% +7.8 |
| Licensed users | 17 | 19 +2 |
| Privileged accounts | 4 | 4 |
| Global admins | 2 | 2 |
| Unassigned licences | 5 | 5 |
| Third-party apps | 3 | 3 |
| Mailboxes forwarding mail | 1 | 1 |
| Conditional Access policies on | 1 | 1 |
| Non-compliant devices | 3 | 3 |
| Groups without an owner | 4 | 4 |
Findings
- Newhigh No files are shared with anyone linksCampaign video.mp4 (Marketing / Documents)
- Newmedium No mailbox is nearly fullevie.davis@contoso.example
- Newmedium No mailbox is nearly fulloliver.hill@contoso.example
- Newmedium People outside can only view shared filesYear end/Draft accounts FY26.xlsx (Clients / Documents)
- Newlow Nobody relies on a text or call as their only second factorwilliam.allen@contoso.example
- FixedEvery active user has MFA registeredella.thomas@contoso.example
Key changes 14
Admin roles, Conditional Access, accounts, mail forwarding, app permissions, devices and groups.
- NewAccounts priya.hughes@contoso.exampleNew member account
- NewAccounts william.allen@contoso.exampleNew member account
- NewLicences priya.hughes@contoso.exampleGiven Microsoft 365 Business Basic
- NewLicences william.allen@contoso.exampleGiven Microsoft 365 Business Premium
- NewDevices DESK-HUGHES15 (priya.hughes@contoso.example)Enrolled Windows
- NewDevices LAPTOP-ALLEN16 (william.allen@contoso.example)Enrolled Windows
- ChangedAdmin activity Payroll SyncUpdate application – Certificates and secrets management by admin@contoso.example on 2026-09-29: Added certificate
- ChangedAdmin activity Block risky countriesDelete conditional access policy by admin@contoso.example on 2026-10-05
- ChangedAdmin activity Require MFA for all usersUpdate conditional access policy by admin@contoso.example on 2026-10-06: On → Off
- ChangedAdmin activity annabel.fraser@contoso.exampleAdd eligible member to role in PIM completed (permanent) by admin@contoso.example on 2026-10-08: Exchange Administrator
- ChangedAdmin activity contoso.exampleSet domain authentication by mallory.hart@contoso.example on 2026-10-09
- ChangedAdmin activity bobby.marsh@contoso.exampleAdd member to role by admin@contoso.example on 2026-10-09: Global Administrator
- ChangedAdmin activity Payroll SyncUpdate application – Certificates and secrets management by admin@contoso.example on 2026-10-10: Added certificate
- ChangedAdmin activity Mail Sync ProAdd service principal credentials by Contoso Automation on 2026-10-11: Credential added
In the detail reports
Open an area to see what changed, row by row.
Identity and access 29
| Change | Mailbox | What changed |
|---|---|---|
| New | priya.hughes@contoso.example | SMTP AUTH: On (organisation default); Used SMTP AUTH recently: No; POP: No; IMAP: Yes |
| New | william.allen@contoso.example | SMTP AUTH: Off; Used SMTP AUTH recently: No; POP: No; IMAP: No |
| Change | Account | What changed |
|---|---|---|
| New | priya.hughes@contoso.example | Type: Member; MFA required by: Require MFA for all users; Legacy sign-in blocked: No |
| New | william.allen@contoso.example | Type: Member; MFA required by: Require MFA for all users; Legacy sign-in blocked: No |
| Change | Accounts | What changed |
|---|---|---|
| Changed | Members | Cloud-only: 17 → 19; Total: 17 → 19 |
| Changed | All accounts | Cloud-only: 18 → 20; Total: 18 → 20 |
| Change | Account | What changed |
|---|---|---|
| Gone | ella.thomas@contoso.example | Gap: Required, not set up; MFA set up: No; Required by: Require MFA for all users; What it means: Will be asked to set up MFA at next sign-in. Until then, anyone with the password can set it up in their place. |
| Change | Account | What changed |
|---|---|---|
| New | ella.thomas@contoso.example | Methods: Windows Hello, Authenticator app; Required by: Require MFA for all users |
| New | priya.hughes@contoso.example | Methods: Windows Hello, Authenticator app; Required by: Require MFA for all users |
| New | william.allen@contoso.example | Methods: Phone; Required by: Require MFA for all users |
| Change | Strength | What changed |
|---|---|---|
| Changed | Phishing-resistant | People: 2 → 4; Share of members: 12% → 22% |
| Changed | Authenticator app or token | Share of members: 56% → 50% |
| Changed | Phone (SMS or voice call) | People: 2 → 3; Share of members: 12% → 17% |
| Changed | None | People: 3 → 2; Share of members: 19% → 11% |
| Change | Method | What changed |
|---|---|---|
| Changed | Windows Hello for Business | People: 1 → 3 |
| Changed | Authenticator app | People: 11 → 13 |
| Changed | Mobile phone (SMS or call) | People: 2 → 3 |
| Change | Account | What changed |
|---|---|---|
| New | william.allen@contoso.example | Admin: No; Strongest method: Phone (SMS or voice call); Methods: Mobile phone (SMS or call); Passwordless: No; Self-service reset: Unknown; What to do: Only a phone: set up the Authenticator app (or a passkey), then keep the phone as a backup at most. |
| Changed | ella.thomas@contoso.example | Strongest method: None → Phishing-resistant; Methods: blank → Windows Hello for Business, Authenticator app; What to do: No second factor. Set up MFA first (see MFA coverage). → Nothing |
| New | priya.hughes@contoso.example | Admin: No; Strongest method: Phishing-resistant; Methods: Windows Hello for Business, Authenticator app; Passwordless: No; Self-service reset: Unknown; What to do: Nothing |
| Change | Account | What changed |
|---|---|---|
| Changed | ella.thomas@contoso.example | MFA set up: No → Yes |
| New | priya.hughes@contoso.example | Password last changed: Unknown; Never expires: No; Synced from on-premises: No; Last sign-in: 2026-10-11; MFA set up: Yes |
| New | william.allen@contoso.example | Password last changed: Unknown; Never expires: No; Synced from on-premises: No; Last sign-in: 2026-10-11; MFA set up: Yes |
| Change | Account | What changed |
|---|---|---|
| New | priya.hughes@contoso.example | Name: Priya Hughes; Type: Member; Sign-in: Allowed; Department: Reception; Job title: Receptionist; Manager: Oliver Hill; Licences: Microsoft 365 Business Basic; Source: Cloud; Created: 2025-03-05; Last sign-in: 2026-10-11 |
| New | william.allen@contoso.example | Name: William Allen; Type: Member; Sign-in: Allowed; Department: Finance; Job title: Accountant; Manager: Joseph Morris; Licences: Microsoft 365 Business Premium; Source: Cloud; Created: 2025-01-27; Last sign-in: 2026-10-11 |
| Change | Manager | What changed |
|---|---|---|
| Changed | joseph.morris@contoso.example | Direct reports: 1 → 2; Reports: Owen Taylor → Owen Taylor, William Allen |
| New | oliver.hill@contoso.example | Name: Oliver Hill; Sign-in: Allowed; Department: Reception; Direct reports: 1; Reports: Priya Hughes |
| Change | Department | What changed |
|---|---|---|
| Changed | Finance | Members: 2 → 3; Sign-in allowed: 2 → 3; Licensed: 2 → 3 |
| Changed | Reception | Members: 1 → 2; Sign-in allowed: 1 → 2; Licensed: 1 → 2 |
Email 89
| Change | Person | What changed |
|---|---|---|
| New | jack.white@contoso.example | Account: Active; Mailboxes: 2; Full access: info@contoso.example, accounts@contoso.example; Send as: accounts@contoso.example, info@contoso.example |
| Changed | ella.thomas@contoso.example | Mailboxes: 2 → 1; Full access: info@contoso.example, reception@contoso.example → reception@contoso.example; Send as: reception@contoso.example → blank |
| New | evie.davis@contoso.example | Account: Active; Mailboxes: 1; Full access: accounts@contoso.example |
| Changed | jacob.johnson@contoso.example | Mailboxes: 2 → 1; Full access: info@contoso.example, accounts@contoso.example → accounts@contoso.example; Send as: accounts@contoso.example → blank |
| Changed | joseph.morris@contoso.example | Send as: blank → reception@contoso.example |
| Changed | noah.clark@contoso.example | Full access: accounts@contoso.example → info@contoso.example |
| New | priya.hughes@contoso.example | Account: Active; Mailboxes: 1; Full access: reception@contoso.example |
| New | william.allen@contoso.example | Account: Active; Mailboxes: 1; Full access: info@contoso.example |
| Gone | olivia.ward@contoso.example | Account: Active; Mailboxes: 1; Full access: info@contoso.example; Send as: info@contoso.example |
| Gone | owen.taylor@contoso.example | Account: Active; Mailboxes: 1; Full access: reception@contoso.example |
| Gone | rhys.evans@contoso.example | Account: Active; Mailboxes: 1; Full access: accounts@contoso.example |
| Change | Mailbox | What changed |
|---|---|---|
| Changed | accounts@contoso.example | Full access: annabel.fraser@contoso.example, bobby.marsh@contoso.example, jacob.johnson@contoso.example, noah.clark@contoso.example, rhys.evans@contoso.example, sam.carter@consultants.example → annabel.fraser@contoso.example, bobby.marsh@contoso.example, evie.davis@contoso.example, jack.white@contoso.example, jacob.johnson@contoso.example, sam.carter@consultants.example; Send as: annabel.fraser@contoso.example, jacob.johnson@contoso.example → annabel.fraser@contoso.example, jack.white@contoso.example |
| Changed | info@contoso.example | Full access: annabel.fraser@contoso.example, ella.thomas@contoso.example, jacob.johnson@contoso.example, olivia.ward@contoso.example → annabel.fraser@contoso.example, jack.white@contoso.example, noah.clark@contoso.example, william.allen@contoso.example; Send as: annabel.fraser@contoso.example, olivia.ward@contoso.example → annabel.fraser@contoso.example, jack.white@contoso.example |
| Changed | reception@contoso.example | Full access: annabel.fraser@contoso.example, ella.thomas@contoso.example, joseph.morris@contoso.example, owen.taylor@contoso.example → annabel.fraser@contoso.example, ella.thomas@contoso.example, joseph.morris@contoso.example, priya.hughes@contoso.example; Send as: annabel.fraser@contoso.example, ella.thomas@contoso.example → annabel.fraser@contoso.example, joseph.morris@contoso.example |
| Change | Mailbox | What changed |
|---|---|---|
| New | accounts@contoso.example | Mailbox type: Shared; Person: evie.davis@contoso.example; Access: Full access; Account: Active |
| New | accounts@contoso.example | Mailbox type: Shared; Person: jack.white@contoso.example; Access: Full access; Account: Active |
| New | accounts@contoso.example | Mailbox type: Shared; Person: jack.white@contoso.example; Access: Send as; Account: Active |
| New | info@contoso.example | Mailbox type: Shared; Person: jack.white@contoso.example; Access: Full access; Account: Active |
| New | info@contoso.example | Mailbox type: Shared; Person: jack.white@contoso.example; Access: Send as; Account: Active |
| New | info@contoso.example | Mailbox type: Shared; Person: noah.clark@contoso.example; Access: Full access; Account: Active |
| New | info@contoso.example | Mailbox type: Shared; Person: william.allen@contoso.example; Access: Full access; Account: Active |
| New | reception@contoso.example | Mailbox type: Shared; Person: joseph.morris@contoso.example; Access: Send as; Account: Active |
| New | reception@contoso.example | Mailbox type: Shared; Person: priya.hughes@contoso.example; Access: Full access; Account: Active |
| Gone | accounts@contoso.example | Mailbox type: Shared; Person: jacob.johnson@contoso.example; Access: Send as; Account: Active |
| Gone | accounts@contoso.example | Mailbox type: Shared; Person: noah.clark@contoso.example; Access: Full access; Account: Active |
| Gone | accounts@contoso.example | Mailbox type: Shared; Person: rhys.evans@contoso.example; Access: Full access; Account: Active |
| Gone | info@contoso.example | Mailbox type: Shared; Person: ella.thomas@contoso.example; Access: Full access; Account: Active |
| Gone | info@contoso.example | Mailbox type: Shared; Person: jacob.johnson@contoso.example; Access: Full access; Account: Active |
| Gone | info@contoso.example | Mailbox type: Shared; Person: olivia.ward@contoso.example; Access: Full access; Account: Active |
| Gone | info@contoso.example | Mailbox type: Shared; Person: olivia.ward@contoso.example; Access: Send as; Account: Active |
| Gone | reception@contoso.example | Mailbox type: Shared; Person: ella.thomas@contoso.example; Access: Send as; Account: Active |
| Gone | reception@contoso.example | Mailbox type: Shared; Person: owen.taylor@contoso.example; Access: Full access; Account: Active |
| Change | Mailbox | What changed |
|---|---|---|
| Changed | accounts@contoso.example | Full access: annabel.fraser@contoso.example, bobby.marsh@contoso.example, jacob.johnson@contoso.example, noah.clark@contoso.example, rhys.evans@contoso.example, sam.carter@consultants.example → annabel.fraser@contoso.example, bobby.marsh@contoso.example, evie.davis@contoso.example, jack.white@contoso.example, jacob.johnson@contoso.example, sam.carter@consultants.example; Send as: annabel.fraser@contoso.example, jacob.johnson@contoso.example → annabel.fraser@contoso.example, jack.white@contoso.example |
| Changed | info@contoso.example | Full access: annabel.fraser@contoso.example, ella.thomas@contoso.example, jacob.johnson@contoso.example, olivia.ward@contoso.example → annabel.fraser@contoso.example, jack.white@contoso.example, noah.clark@contoso.example, william.allen@contoso.example; Send as: annabel.fraser@contoso.example, olivia.ward@contoso.example → annabel.fraser@contoso.example, jack.white@contoso.example |
| Changed | reception@contoso.example | Full access: annabel.fraser@contoso.example, ella.thomas@contoso.example, joseph.morris@contoso.example, owen.taylor@contoso.example → annabel.fraser@contoso.example, ella.thomas@contoso.example, joseph.morris@contoso.example, priya.hughes@contoso.example; Send as: annabel.fraser@contoso.example, ella.thomas@contoso.example → annabel.fraser@contoso.example, joseph.morris@contoso.example |
| Change | Mailbox | What changed |
|---|---|---|
| New | priya.hughes@contoso.example | Type: User; Size: 28.1 GB; Stops sending at: 49.5 GB; Used: 57%; Items: 67463; Recoverable items: 1.4 GB; Archive: No |
| New | william.allen@contoso.example | Type: User; Size: 4.1 GB; Stops sending at: 49.5 GB; Used: 8%; Items: 9771; Recoverable items: 208.5 MB; Archive: No |
| Change | Mailbox | What changed |
|---|---|---|
| New | priya.hughes@contoso.example | Type: User; Account: Active; Litigation hold: No; Archive: No; Mailbox size: 28.1 GB |
| New | william.allen@contoso.example | Type: User; Account: Active; Litigation hold: No; Archive: No; Mailbox size: 4.1 GB |
| Change | Mailbox | What changed |
|---|---|---|
| New | bobby.marsh@contoso.example | Type: User; State: On; Replies outside the organisation: Everyone; First seen on: 2026-10-11; Account: Sign-in blocked; Reply to colleagues: Bobby Marsh has left the company. Please contact annabel.fraser@contoso.example instead.; Reply to outside senders: Bobby Marsh has left the company. Please contact annabel.fraser@contoso.example instead. |
| New | ella.thomas@contoso.example | Type: User; State: On; Replies outside the organisation: Contacts only; First seen on: 2026-10-11; Account: Active; Reply to colleagues: I'm at a conference this week and will reply on Monday.; Reply to outside senders: I'm at a conference this week and will reply on Monday. |
| New | william.clark@contoso.example | Type: User; State: Scheduled; From: 2026-10-15; Until: 2026-10-29; Replies outside the organisation: Everyone; Account: Active; Reply to colleagues: I'm on holiday from next Monday for two weeks.; Reply to outside senders: I'm on holiday from next Monday for two weeks. |
| Change | List | What changed |
|---|---|---|
| Changed | Christmas party 2023 | Why: No owner → No owner, No mail in 90 days (last 24 May 2026) |
| Changed | Old projects | Why: No members, No owner → No members, No owner, No mail in 90 days (last 6 Sep 2025) |
| Change | List | What changed |
|---|---|---|
| Changed | Accounts | Mail in the last 30 days: 12 → 63 |
| Changed | All staff | Members: 16 → 18; Mail in the last 30 days: 40 → 96 |
| Changed | Finance alerts | Mail in the last 30 days: 6 → 34 |
| Changed | Sales team | Mail in the last 30 days: 8 → 43 |
| Changed | Website enquiries | Mail in the last 30 days: 25 → 81 |
| Change | List | What changed |
|---|---|---|
| New | Accounts | Member: Megan Smith; Address: megan.smith@contoso.example; Member type: Mailbox |
| New | Accounts | Member: Olivia Wilson; Address: olivia.wilson@contoso.example; Member type: Mailbox |
| New | Accounts | Member: William Allen; Address: william.allen@contoso.example; Member type: Mailbox |
| New | All staff | Member: Priya Hughes; Address: priya.hughes@contoso.example; Member type: Mailbox |
| New | All staff | Member: William Allen; Address: william.allen@contoso.example; Member type: Mailbox |
| New | Christmas party 2023 | Member: Olivia Wilson; Address: olivia.wilson@contoso.example; Member type: Mailbox |
| New | Christmas party 2023 | Member: Annabel Fraser; Address: annabel.fraser@contoso.example; Member type: Mailbox |
| New | Finance alerts | Member: Annabel Fraser; Address: annabel.fraser@contoso.example; Member type: Mailbox |
| New | Finance alerts | Member: Priya Hughes; Address: priya.hughes@contoso.example; Member type: Mailbox |
| New | Finance alerts | Member: Olivia Wilson; Address: olivia.wilson@contoso.example; Member type: Mailbox |
| New | Sales team | Member: Megan Smith; Address: megan.smith@contoso.example; Member type: Mailbox |
| New | Sales team | Member: Oliver Hill; Address: oliver.hill@contoso.example; Member type: Mailbox |
| New | Sales team | Member: Rhys Evans; Address: rhys.evans@contoso.example; Member type: Mailbox |
| New | Sales team | Member: Noah Clark; Address: noah.clark@contoso.example; Member type: Mailbox |
| New | Sales team | Member: Sophie Taylor; Address: sophie.taylor@contoso.example; Member type: Mailbox |
| New | Website enquiries | Member: Ella Thomas; Address: ella.thomas@contoso.example; Member type: Mailbox |
| New | Website enquiries | Member: Rhys Evans; Address: rhys.evans@contoso.example; Member type: Mailbox |
| New | Website enquiries | Member: Olivia Ward; Address: olivia.ward@contoso.example; Member type: Mailbox |
| Gone | Accounts | Member: Lily Harrison; Address: lily.harrison@contoso.example; Member type: Mailbox |
| Gone | Accounts | Member: Rhys Evans; Address: rhys.evans@contoso.example; Member type: Mailbox |
| Gone | Accounts | Member: Annabel Fraser; Address: annabel.fraser@contoso.example; Member type: Mailbox |
| Gone | Christmas party 2023 | Member: Ella Thomas; Address: ella.thomas@contoso.example; Member type: Mailbox |
| Gone | Christmas party 2023 | Member: Jack White; Address: jack.white@contoso.example; Member type: Mailbox |
| Gone | Finance alerts | Member: Jack White; Address: jack.white@contoso.example; Member type: Mailbox |
| Gone | Finance alerts | Member: Sophie Taylor; Address: sophie.taylor@contoso.example; Member type: Mailbox |
| Gone | Finance alerts | Member: Evie Davis; Address: evie.davis@contoso.example; Member type: Mailbox |
| Gone | Sales team | Member: Evie Davis; Address: evie.davis@contoso.example; Member type: Mailbox |
| Gone | Sales team | Member: Olivia Ward; Address: olivia.ward@contoso.example; Member type: Mailbox |
| Gone | Sales team | Member: Owen Taylor; Address: owen.taylor@contoso.example; Member type: Mailbox |
| Gone | Sales team | Member: Lily Harrison; Address: lily.harrison@contoso.example; Member type: Mailbox |
| Gone | Sales team | Member: Annabel Fraser; Address: annabel.fraser@contoso.example; Member type: Mailbox |
| Gone | Website enquiries | Member: Joseph Morris; Address: joseph.morris@contoso.example; Member type: Mailbox |
| Gone | Website enquiries | Member: William Clark; Address: william.clark@contoso.example; Member type: Mailbox |
| Gone | Website enquiries | Member: Jacob Johnson; Address: jacob.johnson@contoso.example; Member type: Mailbox |
| Change | Mailbox | What changed |
|---|---|---|
| Changed | joseph.morris@contoso.example | Why: Not synced for 196 days: the partnership can be removed → Not synced for 226 days: the partnership can be removed |
| Changed | lily.harrison@contoso.example | Why: Not synced for 342 days: the partnership can be removed → Not synced for 372 days: the partnership can be removed |
| Changed | olivia.wilson@contoso.example | Why: Not synced for 266 days: the partnership can be removed → Not synced for 296 days: the partnership can be removed |
| Change | Mailbox | What changed |
|---|---|---|
| New | priya.hughes@contoso.example | Device: Pixel 8; Platform: Android; Operating system: Android 14; App: Outlook app; Access: Allowed; First synced: 2025-12-02; Last synced: 2026-10-11; Account: Active |
| New | william.allen@contoso.example | Device: SM-S918B; Platform: Android; Operating system: Android 14; App: Outlook app; Access: Allowed; First synced: 2025-05-28; Last synced: 2026-10-07; Account: Active |
| Change | Platform | What changed |
|---|---|---|
| Changed | Android | Devices: 6 → 8; Outlook app: 1 → 3; Synced in the last 30 days: 5 → 7 |
Files and Teams 72
| Change | Name | What changed |
|---|---|---|
| New | Finance | Team: No; Visibility: Private; Owners: Annabel Fraser, Lily Harrison; Members: 9; Guests: 1; Created: 2024-03-04 |
| New | Marketing | Team: No; Visibility: Private; Owners: Bobby Marsh (disabled); Members: 8; Guests: 0; Created: 2024-03-04 |
| Gone | Finance | Team: No; Visibility: Private; Owners: Annabel Fraser, Lily Harrison; Members: 11; Guests: 1; Created: 2024-03-04 |
| Gone | Marketing | Team: No; Visibility: Private; Owners: Bobby Marsh (disabled); Members: 11; Guests: 0; Created: 2024-03-04 |
| Change | Account | What changed |
|---|---|---|
| Changed | ella.thomas@contoso.example | Teams and groups: 4 → 2; Member of: Clients, Finance, Marketing, Operations → Clients, Operations |
| Changed | evie.davis@contoso.example | Teams and groups: 3 → 2; Member of: Clients, Finance, Operations → Clients, Operations |
| Changed | jack.white@contoso.example | Teams and groups: 2 → 3; Member of: Finance, Operations → Clients, Finance, Operations |
| Changed | jacob.johnson@contoso.example | Teams and groups: 2 → 4; Member of: Marketing, Operations → Clients, Finance, Marketing, Operations |
| Changed | joseph.morris@contoso.example | Teams and groups: 3 → 1; Member of: Clients, Marketing, Operations → Operations |
| Changed | megan.smith@contoso.example | Teams and groups: 3 → 2; Member of: Clients, Marketing, Operations → Clients, Operations |
| Changed | oliver.hill@contoso.example | Teams and groups: 4 → 3; Member of: Clients, Finance, Marketing, Operations → Clients, Marketing, Operations |
| Changed | olivia.ward@contoso.example | Teams and groups: 2 → 1; Member of: Clients, Operations → Operations |
| Changed | olivia.wilson@contoso.example | Teams and groups: 3 → 1; Member of: Clients, Marketing, Operations → Clients |
| Changed | owen.taylor@contoso.example | Teams and groups: 2 → 3; Member of: Clients, Finance → Clients, Finance, Marketing |
| New | priya.hughes@contoso.example | Name: Priya Hughes; Type: Member; Account status: Enabled; Teams and groups: 1; Member of: Operations |
| Changed | sophie.taylor@contoso.example | Teams and groups: 4 → 3; Member of: Clients, Finance, Marketing, Operations → Clients, Marketing, Operations |
| New | william.allen@contoso.example | Name: William Allen; Type: Member; Account status: Enabled; Teams and groups: 1; Member of: Finance |
| Change | Name | What changed |
|---|---|---|
| New | Clients | Team: Yes; Visibility: Private; Owners: Annabel Fraser, Oliver Hill; Members: 14; Member list: accounts@hollis-partners.example, annabel.fraser@contoso.example, ella.thomas@contoso.example, evie.davis@contoso.example, j.okafor@brightpath-consulting.example, jack.white@contoso.example, jacob.johnson@contoso.example, megan.smith@contoso.example, oliver.hill@contoso.example, olivia.wilson@contoso.example, owen.taylor@contoso.example, rhys.evans@contoso.example, sophie.taylor@contoso.example, william.clark@contoso.example; Guests: accounts@hollis-partners.example, j.okafor@brightpath-consulting.example |
| New | Finance | Team: No; Visibility: Private; Owners: Annabel Fraser, Lily Harrison; Members: 9; Member list: accounts@hollis-partners.example, annabel.fraser@contoso.example, jack.white@contoso.example, jacob.johnson@contoso.example, lily.harrison@contoso.example, noah.clark@contoso.example, owen.taylor@contoso.example, rhys.evans@contoso.example, william.allen@contoso.example; Guests: accounts@hollis-partners.example |
| New | Marketing | Team: No; Visibility: Private; Owners: Bobby Marsh (disabled); Members: 8; Member list: annabel.fraser@contoso.example, bobby.marsh@contoso.example, jacob.johnson@contoso.example, lily.harrison@contoso.example, oliver.hill@contoso.example, owen.taylor@contoso.example, rhys.evans@contoso.example, sophie.taylor@contoso.example |
| New | Operations | Team: Yes; Visibility: Private; Owners: Evie Davis; Members: 14; Member list: annabel.fraser@contoso.example, ella.thomas@contoso.example, evie.davis@contoso.example, jack.white@contoso.example, jacob.johnson@contoso.example, joseph.morris@contoso.example, lily.harrison@contoso.example, megan.smith@contoso.example, noah.clark@contoso.example, oliver.hill@contoso.example, olivia.ward@contoso.example, priya.hughes@contoso.example, rhys.evans@contoso.example, sophie.taylor@contoso.example |
| Gone | Clients | Team: Yes; Visibility: Private; Owners: Annabel Fraser, Oliver Hill; Members: 14; Member list: accounts@hollis-partners.example, annabel.fraser@contoso.example, ella.thomas@contoso.example, evie.davis@contoso.example, j.okafor@brightpath-consulting.example, joseph.morris@contoso.example, megan.smith@contoso.example, oliver.hill@contoso.example, olivia.ward@contoso.example, olivia.wilson@contoso.example, owen.taylor@contoso.example, rhys.evans@contoso.example, sophie.taylor@contoso.example, william.clark@contoso.example; Guests: accounts@hollis-partners.example, j.okafor@brightpath-consulting.example |
| Gone | Finance | Team: No; Visibility: Private; Owners: Annabel Fraser, Lily Harrison; Members: 11; Member list: accounts@hollis-partners.example, annabel.fraser@contoso.example, ella.thomas@contoso.example, evie.davis@contoso.example, jack.white@contoso.example, lily.harrison@contoso.example, noah.clark@contoso.example, oliver.hill@contoso.example, owen.taylor@contoso.example, rhys.evans@contoso.example, sophie.taylor@contoso.example; Guests: accounts@hollis-partners.example |
| Gone | Marketing | Team: No; Visibility: Private; Owners: Bobby Marsh (disabled); Members: 11; Member list: annabel.fraser@contoso.example, bobby.marsh@contoso.example, ella.thomas@contoso.example, jacob.johnson@contoso.example, joseph.morris@contoso.example, lily.harrison@contoso.example, megan.smith@contoso.example, oliver.hill@contoso.example, olivia.wilson@contoso.example, rhys.evans@contoso.example, sophie.taylor@contoso.example |
| Gone | Operations | Team: Yes; Visibility: Private; Owners: Evie Davis; Members: 14; Member list: annabel.fraser@contoso.example, ella.thomas@contoso.example, evie.davis@contoso.example, jack.white@contoso.example, jacob.johnson@contoso.example, joseph.morris@contoso.example, lily.harrison@contoso.example, megan.smith@contoso.example, noah.clark@contoso.example, oliver.hill@contoso.example, olivia.ward@contoso.example, olivia.wilson@contoso.example, rhys.evans@contoso.example, sophie.taylor@contoso.example |
| Change | Person | What changed |
|---|---|---|
| New | william.allen@contoso.example | Account: Enabled; Storage: 29.5 GB; Of quota: 3%; Files: 50; Active files (30 days): 5; Last activity: 2026-10-10 |
| New | priya.hughes@contoso.example | Account: Enabled; Storage: 19.6 GB; Of quota: 2%; Files: 50; Active files (30 days): 5; Last activity: 2026-10-10 |
| Change | File or folder | What changed |
|---|---|---|
| New | Campaign video.mp4 | Location: Marketing / Documents; Access: Edit; Expires: 2026-11-05; Password: No; Last modified: 2026-10-10 |
| Change | File or folder | What changed |
|---|---|---|
| New | Year end/Draft accounts FY26.xlsx | Location: Clients / Documents; Shared with: partner@mason-legal.example; Can edit: No; Last modified: 2026-10-07 |
| Change | File or folder | What changed |
|---|---|---|
| New | Budget 2027.xlsx | Location: Finance / Documents; Access: View; Last modified: 2026-09-23 |
| Change | Site | What changed |
|---|---|---|
| Changed | Finance | Members: 11 → 9 |
| Changed | Marketing | Members: 11 → 8 |
| Change | Site | What changed |
|---|---|---|
| New | Finance | Who: Members of Finance: 9 people, 1 guest; How: Microsoft 365 group; Can: Edit; Outside the organisation: Yes |
| New | Marketing | Who: Members of Marketing: 8 people; How: Microsoft 365 group; Can: Edit; Outside the organisation: No |
| Gone | Finance | Who: Members of Finance: 11 people, 1 guest; How: Microsoft 365 group; Can: Edit; Outside the organisation: Yes |
| Gone | Marketing | Who: Members of Marketing: 11 people; How: Microsoft 365 group; Can: Edit; Outside the organisation: No |
| Change | Site | What changed |
|---|---|---|
| New | Staff Intranet | Who: evie.davis@contoso.example; Type: Person; How: Through Staff Intranet Members; Permission level: Edit; Outside the organisation: No |
| New | Staff Intranet | Who: owen.taylor@contoso.example; Type: Person; How: Through Staff Intranet Members; Permission level: Edit; Outside the organisation: No |
| Gone | Staff Intranet | Who: rhys.evans@contoso.example; Type: Person; How: Through Staff Intranet Members; Permission level: Edit; Outside the organisation: No |
| Gone | Staff Intranet | Who: olivia.wilson@contoso.example; Type: Person; How: Through Staff Intranet Members; Permission level: Edit; Outside the organisation: No |
| Change | Person | What changed |
|---|---|---|
| Changed | jacob.johnson@contoso.example | Sites: 2 → 4; Which sites: Marketing, Operations → Clients, Finance, Marketing, Operations |
| Changed | owen.taylor@contoso.example | Sites: 2 → 4; Which sites: Clients, Finance → Clients, Finance, Marketing, Staff Intranet |
| Changed | rhys.evans@contoso.example | Sites: 5 → 4; Which sites: Clients, Finance, Marketing, Operations, Staff Intranet → Clients, Finance, Marketing, Operations |
| Changed | evie.davis@contoso.example | Which sites: Clients, Finance, Operations → Clients, Operations, Staff Intranet |
| Changed | jack.white@contoso.example | Sites: 2 → 3; Which sites: Finance, Operations → Clients, Finance, Operations |
| Changed | oliver.hill@contoso.example | Sites: 4 → 3; Which sites: Clients, Finance, Marketing, Operations → Clients, Marketing, Operations |
| Changed | sophie.taylor@contoso.example | Sites: 4 → 3; Which sites: Clients, Finance, Marketing, Operations → Clients, Marketing, Operations |
| Changed | ella.thomas@contoso.example | Sites: 4 → 2; Which sites: Clients, Finance, Marketing, Operations → Clients, Operations |
| Changed | megan.smith@contoso.example | Sites: 3 → 2; Which sites: Clients, Marketing, Operations → Clients, Operations |
| Changed | joseph.morris@contoso.example | Sites: 3 → 1; Which sites: Clients, Marketing, Operations → Operations |
| Changed | olivia.ward@contoso.example | Sites: 2 → 1; Which sites: Clients, Operations → Operations |
| Changed | olivia.wilson@contoso.example | Sites: 4 → 1; Which sites: Clients, Marketing, Operations, Staff Intranet → Clients |
| New | priya.hughes@contoso.example | Outside the organisation: No; Sites: 1; Highest level: Edit; Which sites: Operations |
| New | william.allen@contoso.example | Outside the organisation: No; Sites: 1; Highest level: Edit; Which sites: Finance |
| Change | File or folder | What changed |
|---|---|---|
| Changed | Supplier contracts/Fabrikam MSA.pdf | Status: Expires soon → Expired |
| New | Engagement letters/Engagement 2026.pdf | Location: Clients / Documents; Who: accounts@hartleyandco.example; Can: View; Expires: 2026-10-23; Days left: 11; Status: Expires soon |
| New | Campaign video.mp4 | Location: Marketing / Documents; Who: Anyone with the link; Can: Edit; Expires: 2026-11-05; Days left: 24; Status: Expires soon |
| Change | File or folder | What changed |
|---|---|---|
| New | Year end/Draft accounts FY26.xlsx | Location: Clients / Documents; Who: partner@mason-legal.example; How: Link; Can: Edit; Outside: Yes; Shared by: bobby.marsh@contoso.example; Shared on: 2026-10-05; Expires: Never |
| New | Budget 2027.xlsx | Location: Finance / Documents; Who: Everyone in the organisation; How: Organisation link; Can: View; Outside: No; Shared by: bobby.marsh@contoso.example; Shared on: 2026-09-21; Expires: Never |
| New | Campaign video.mp4 | Location: Marketing / Documents; Who: Anyone with the link; How: Anyone link; Can: Edit; Outside: Yes; Shared by: eve.lambert@contoso.example; Shared on: 2026-10-08; Expires: 2026-11-05 |
| New | Rotas/Rota October.xlsx | Location: Operations / Documents; Who: mallory.hart@contoso.example; How: Link; Can: View; Outside: No; Shared by: carl.ashworth@contoso.example; Shared on: 2026-10-01; Expires: Never |
| New | Rotas/Rota October.xlsx | Location: Operations / Documents; Who: dan.redford@contoso.example; How: Link; Can: View; Outside: No; Shared by: carl.ashworth@contoso.example; Shared on: 2026-10-01; Expires: Never |
| Gone | Board pack (folder) | Location: Finance / Documents; Who: dan.redford@contoso.example; How: Direct; Can: View; Outside: No; Shared by: annabel.fraser@contoso.example; Shared on: 2026-03-25; Expires: Never |
| Change | Person or group | What changed |
|---|---|---|
| New | partner@mason-legal.example | Type: Guest or outside address; Files and folders: 1; Can edit: 1; Where: Clients / Documents |
| Changed | dan.redford@contoso.example | Where: Finance / Documents → Operations / Documents |
| New | mallory.hart@contoso.example | Type: Member; Files and folders: 1; Can edit: 0; Where: Operations / Documents |
| Gone | legal@fabrikam-supplies.example | Type: Guest or outside address; Files and folders: 1; Can edit: 0; Where: Finance / Documents |
| Change | Group | What changed |
|---|---|---|
| Changed | Marketing | Members: 11 → 8 |
| Change | Group | What changed |
|---|---|---|
| New | Finance | Kind: Microsoft 365 group; Membership: Assigned; Members: 9; Created: 2024-03-04 |
| New | Marketing | Kind: Microsoft 365 group; Membership: Assigned; Members: 8; Created: 2024-03-04 |
| Gone | Finance | Kind: Microsoft 365 group; Membership: Assigned; Members: 11; Created: 2024-03-04 |
| Gone | Marketing | Kind: Microsoft 365 group; Membership: Assigned; Members: 11; Created: 2024-03-04 |
Devices and apps 7
| Change | Operating system | What changed |
|---|---|---|
| Changed | Windows 11 25H2 | Devices: 6 → 8 |
| Change | Device | What changed |
|---|---|---|
| Changed | LAPTOP-MARSH | Problems: Not compliant; Not encrypted; Windows 10 stopped getting security updates on 14 Oct 2025. Extended Security Updates or LTSC can cover it; otherwise upgrade → Not compliant; Not encrypted; Windows 10 stopped getting security updates on 14 Oct 2025. Extended Security Updates or LTSC can cover it; otherwise upgrade; No check-in for 45 days |
| Changed | DESK-WILSON12 | Problems: Not compliant; Windows 11 24H2: updates for Home and Pro end 13 Oct 2026 → Not compliant; Windows 11 24H2: updates for Home and Pro end 13 Oct 2026; No check-in for 38 days |
| Change | Device | What changed |
|---|---|---|
| New | DESK-HUGHES15 | User: priya.hughes@contoso.example; Owner: Company; Operating system: Windows 11 25H2 (10.0.26200.6899); Compliance: Compliant; Encrypted: Yes; Last check-in: 2026-10-11 (today); Enrolled: 2024-12-30; Model: Dell Latitude 7450 |
| New | LAPTOP-ALLEN16 | User: william.allen@contoso.example; Owner: Company; Operating system: Windows 11 25H2 (10.0.26200.6584); Compliance: Compliant; Encrypted: Yes; Last check-in: 2026-10-11 (today); Enrolled: 2024-11-30; Model: Lenovo ThinkPad T14 Gen 5 |
| Change | Device | What changed |
|---|---|---|
| New | DESK-HUGHES15 | Operating system: Windows 11 25H2 (10.0.26200.6899); Join type: Entra joined; In Intune: Yes; Last seen: 2026-10-09 (2d); Registered: 2024-12-30; Enabled: Yes |
| New | LAPTOP-ALLEN16 | Operating system: Windows 11 25H2 (10.0.26200.6584); Join type: Entra joined; In Intune: Yes; Last seen: 2026-10-09 (2d); Registered: 2024-11-30; Enabled: Yes |
Tenant and licences 19
| Change | Licence | What changed |
|---|---|---|
| Changed | Microsoft 365 Business Basic | Purchased: 5 → 6; Assigned: 3 → 4; Cost / month: £24.50 → £29.40 |
| Changed | Microsoft 365 Business Premium | Purchased: 17 → 18; Assigned: 14 → 15; Cost / month: £307.70 → £325.80 |
| Change | Account | What changed |
|---|---|---|
| New | priya.hughes@contoso.example | Licence: Microsoft 365 Business Basic; Assigned: Not known; State: Active; Sign-in: Allowed |
| New | william.allen@contoso.example | Licence: Microsoft 365 Business Premium; Assigned: Not known; State: Active; Sign-in: Allowed |
| Change | Licence | What changed |
|---|---|---|
| Changed | Microsoft 365 Business Premium | Purchased: 17 → 18; Assigned: 14 → 15 |
| Changed | Microsoft 365 Business Basic | Purchased: 5 → 6; Assigned: 3 → 4 |
| Change | Service | What changed |
|---|---|---|
| Changed | Licensed: 20 → 22; Active: 17 → 19; Active share: 85% → 86% | |
| Changed | Teams | Licensed: 20 → 22; Active: 14 → 16; Active share: 70% → 73% |
| Changed | OneDrive | Licensed: 20 → 22; Active: 8 → 9; Not active: 12 → 13; Active share: 40% → 41% |
| Changed | SharePoint | Licensed: 20 → 22; Not active: 20 → 22 |
| Changed | Office apps | Licensed: 20 → 22; Active: 17 → 19; Active share: 85% → 86% |
| Change | Person | What changed |
|---|---|---|
| New | priya.hughes@contoso.example | Last email: 11 Oct 2026; Last Teams: 11 Oct 2026; Last OneDrive: 8 Oct 2026; Last SharePoint: Never; Last Office apps: 11 Oct 2026; Office apps on: Mobile, Web; Licences: Microsoft 365 Business Basic |
| New | william.allen@contoso.example | Last email: 7 Oct 2026; Last Teams: 7 Oct 2026; Last OneDrive: Never; Last SharePoint: Never; Last Office apps: 7 Oct 2026; Office apps on: Windows, Mobile; Licences: Microsoft 365 Business Premium |
| Change | App | What changed |
|---|---|---|
| Changed | Outlook | People: 17 → 19; Windows: 10 → 11; Mobile: 14 → 16; Web: 5 → 6 |
| Changed | Word | People: 13 → 14; Windows: 10 → 11 |
| Changed | Excel | People: 12 → 13; Windows: 10 → 11 |
| Changed | Teams | People: 12 → 13; Windows: 9 → 10; Mobile: 12 → 13 |
| Change | Person | What changed |
|---|---|---|
| New | priya.hughes@contoso.example | Licences: Microsoft 365 Business Basic; Not used in the last 30 days: SharePoint; Uses: Email, Teams, OneDrive |
| New | william.allen@contoso.example | Licences: Microsoft 365 Business Premium; Not used in the last 30 days: OneDrive, SharePoint; Uses: Email, Teams, Office apps |
No changes in: Mail forwarding, Inbox rules, Admin activity, Apps and consents, Tenant settings, Email domains, Guests and sharing, Deleted users and groups, Admins and roles, Inactive accounts, Sign-in activity, Secure Score trend, SharePoint sites, SharePoint storage, Administrative units, Mailbox size trend, Mail flow by domain, Teams channels, guests and apps, Unused apps, Licence changes.
Not compared: Risky users. Risky users come from Entra ID Protection, which needs Entra ID P2 (included in Microsoft 365 E5, or as an add-on to Business Premium or E3). This tenant doesn't have it. The Sign-in activity report still shows failed sign-ins, unusual countries and sign-ins without MFA.