Contoso Legal LLP
contoso.onmicrosoft.com
Each row is an account or setting a check flagged. Findings close on their own once the next collection no longer sees the problem. If something is intentional, accept the risk so it moves out of the totals.
Open findings
74
from 39 checks
Critical or high
19
fix these first
New in 30 days
5
first seen since 12 Sep
Open over 90 days
0
Accepted risks
0
left out of the totals
| Severity | Account or item | Detail | Category | First seen | Action |
|---|---|---|---|---|---|
| low | g#EXT#@contoso.example | Exchange Administrator: MFA registration unknown | Admins | 7 Sep 2026 |
Accept risk |
| low | Operations | One owner (Microsoft 365 group) | Sharing | 7 Sep 2026 |
Accept risk |
| low | Staff Intranet | One owner (site administrators) | Sharing | 7 Sep 2026 |
Accept risk |
| low | DESK-SMITH03 (megan.smith@contoso.example) | Windows 11 24H2: updates for Home and Pro end 13 Oct 2026. | Devices | 7 Sep 2026 |
Accept risk |
| low | DESK-WILSON12 (olivia.wilson@contoso.example) | Windows 11 24H2: updates for Home and Pro end 13 Oct 2026. | Devices | 7 Sep 2026 |
Accept risk |
| low | LAPTOP-DAVIS01 (evie.davis@contoso.example) | Windows 11 24H2: updates for Home and Pro end 13 Oct 2026. | Devices | 7 Sep 2026 |
Accept risk |
| low | LAPTOP-EVANS02 (rhys.evans@contoso.example) | Windows 11 24H2: updates for Home and Pro end 13 Oct 2026. | Devices | 7 Sep 2026 |
Accept risk |
| low | LAPTOP-HILL07 (oliver.hill@contoso.example) | Windows 11 24H2: updates for Home and Pro end 13 Oct 2026. | Devices | 7 Sep 2026 |
Accept risk |
| low | LAPTOP-TAYLOR08 (owen.taylor@contoso.example) | Windows 11 24H2: updates for Home and Pro end 13 Oct 2026. | Devices | 7 Sep 2026 |
Accept risk |
| low | LAPTOP-THOMAS10 (ella.thomas@contoso.example) | Windows 11 24H2: updates for Home and Pro end 13 Oct 2026. | Devices | 7 Sep 2026 |
Accept risk |
| low | LAPTOP-WARD11 (olivia.ward@contoso.example) | Windows 11 24H2: updates for Home and Pro end 13 Oct 2026. | Devices | 7 Sep 2026 |
Accept risk |
| low | parked.example | Doesn't receive mail but has no DMARC p=reject record | 7 Sep 2026 |
Accept risk |
|
| low | Marketing | Microsoft 365 group, only owner is disabled (Bobby Marsh) | Groups | 7 Sep 2026 |
Accept risk |
| low | Marketing | Microsoft 365 group, no owner | Groups | 7 Sep 2026 |
Accept risk |
| low | Provisioned | Microsoft 365 group, owned only by an app (Provisioning app) | Groups | 7 Sep 2026 |
Accept risk |
| low | g#EXT#@contoso.example | Guest, never signed in, created ? | Accounts | 7 Sep 2026 |
Accept risk |
| low | Old connector | The 1 credential expired, last on 1 Jan 2025 | Apps | 7 Sep 2026 |
Accept risk |
| low | Tenant | Users can register apps that nobody reviews | Tenant settings | 7 Sep 2026 |
Accept risk |
| low | annabel.fraser@contoso.example | Reports to Bobby Marsh, whose sign-in is blocked | Accounts | 7 Sep 2026 |
Accept risk |
| low | DESK-WILSON12 (olivia.wilson@contoso.example) | Last check-in 38 days ago | Devices | 7 Sep 2026 |
Accept risk |
| low | LAPTOP-MARSH (bobby.marsh@contoso.example) | Last check-in 45 days ago | Devices | 7 Sep 2026 |
Accept risk |
| low | Tenant | Guests can invite other guests | Guests | 7 Sep 2026 |
Accept risk |
| low | DESK-RECEPTION | Hybrid joined, not managed by Intune | Devices | 7 Sep 2026 |
Accept risk |
| low | contoso.example | No MTA-STS policy, so mail sent to this domain can be forced onto an unencrypted connection | 7 Sep 2026 |
Accept risk |
|
| low | rhys.evans@contoso.example | Second factor is only Mobile phone (SMS or call) | Identity | 7 Sep 2026 |
Accept risk |
| low | sophie.taylor@contoso.example | Second factor is only Mobile phone (SMS or call) | Identity | 7 Sep 2026 |
Accept risk |
| low | william.allen@contoso.example | Second factor is only Mobile phone (SMS or call) | Identity | 12 Oct 2026 |
Accept risk |
| low | Organisation | SMTP AUTH is allowed | 7 Sep 2026 |
Accept risk |
|
| low | parked.example | Doesn't receive mail but has no "v=spf1 -all" record to stop spoofing | 7 Sep 2026 |
Accept risk |
|
| low | OLD-PC | Windows, last seen 200 days ago | Devices | 7 Sep 2026 |
Accept risk |
| low | Microsoft 365 Business Basic | 2 of 6 unassigned | Licences | 7 Sep 2026 |
Accept risk |
| low | Microsoft 365 Business Premium | 3 of 18 unassigned | Licences | 7 Sep 2026 |
Accept risk |
Accepted risks 0
No accepted risks. When something is intentional, accept the risk from its row above and it moves here with the reason.
Latest collection 12 Oct 2026, 04:00 UTC. Severity, check and first-seen filters, sorting and hidden columns stay in the address, so a saved view or a download shows the same rows.