Contoso Legal LLP
contoso.onmicrosoft.com
Each row is an account or setting a check flagged. Findings close on their own once the next collection no longer sees the problem. If something is intentional, accept the risk so it moves out of the totals.
Open findings
77
from 40 checks
Critical or high
18
fix these first
New in 30 days
5
first seen since 16 Sep
Open over 90 days
0
Accepted risks
0
left out of the totals
| Severity | Account or item | Detail | Category | Action |
|---|---|---|---|---|
| medium | Brand assets (Marketing / Documents) | Anyone can view, link never expires | Sharing |
Accept risk |
| medium | holiday.jpg (OneDrive of annabel.fraser@ | Anyone can view | Sharing |
Accept risk |
| medium | DESK-SMITH03 (megan.smith@contoso.example) | Windows 11 24H2: updates for Home and Pro ended 13 Oct 2026 (Enterprise and Education: 12 Oct 2027). | Devices |
Accept risk |
| medium | DESK-WILSON12 (olivia.wilson@ | Windows 11 24H2: updates for Home and Pro ended 13 Oct 2026 (Enterprise and Education: 12 Oct 2027). | Devices |
Accept risk |
| medium | LAPTOP-DAVIS01 (evie.davis@contoso.example) | Windows 11 24H2: updates for Home and Pro ended 13 Oct 2026 (Enterprise and Education: 12 Oct 2027). | Devices |
Accept risk |
| medium | LAPTOP-EVANS02 (rhys.evans@contoso.example) | Windows 11 24H2: updates for Home and Pro ended 13 Oct 2026 (Enterprise and Education: 12 Oct 2027). | Devices |
Accept risk |
| medium | LAPTOP-HILL07 (oliver.hill@contoso.example) | Windows 11 24H2: updates for Home and Pro ended 13 Oct 2026 (Enterprise and Education: 12 Oct 2027). | Devices |
Accept risk |
| medium | LAPTOP-TAYLOR08 (owen.taylor@contoso.example) | Windows 11 24H2: updates for Home and Pro ended 13 Oct 2026 (Enterprise and Education: 12 Oct 2027). | Devices |
Accept risk |
| medium | LAPTOP-THOMAS10 (ella.thomas@contoso.example) | Windows 11 24H2: updates for Home and Pro ended 13 Oct 2026 (Enterprise and Education: 12 Oct 2027). | Devices |
Accept risk |
| medium | LAPTOP-WARD11 (olivia.ward@contoso.example) | Windows 11 24H2: updates for Home and Pro ended 13 Oct 2026 (Enterprise and Education: 12 Oct 2027). | Devices |
Accept risk |
| medium | carl.ashworth@contoso.example | No MFA method registered | Identity |
Accept risk |
| medium | joseph.morris@contoso.example | No MFA method registered | Identity |
Accept risk |
| medium | lily.harrison@contoso.example | No MFA method registered | Identity |
Accept risk |
| medium | annabel.fraser@ | Global Administrator; signs in with Authenticator app | Admins |
Accept risk |
| medium | breakglass@contoso.example | Global Administrator; signs in with no MFA method at all | Admins |
Accept risk |
| medium | DESK-SMITH03 | Encrypted, but no recovery key saved in Entra ID | Devices |
Accept risk |
| medium | LAPTOP-WARD11 | Encrypted, but no recovery key saved in Entra ID | Devices |
Accept risk |
| medium | DESK-WILSON12 (olivia.wilson@ | Not compliant | Devices |
Accept risk |
| medium | LAPTOP-HILL07 (oliver.hill@contoso.example) | Not compliant | Devices |
Accept risk |
| medium | LAPTOP-MARSH (bobby.marsh@contoso.example) | Not compliant | Devices |
Accept risk |
| medium | contoso.example | Microsoft 365 DKIM isn't set up (selector2 CNAME missing) |
Accept risk |
|
| medium | contoso.example | DMARC is monitor-only (p=none); spoofed mail is still delivered |
Accept risk |
|
| medium | iOS/iPadOS | 1 enrolled device, no compliance policy assigned | Devices |
Accept risk |
| medium | bobby.marsh@contoso.example | Disabled, holding 1 licence | Licences |
Accept risk |
| medium | accounts@contoso.example | 44.8 GB of 49.5 GB (91%), no archive | Storage |
Accept risk |
| medium | evie.davis@contoso.example | 47.2 GB of 49.5 GB (95%), no archive | Storage |
Accept risk |
| medium | oliver.hill@contoso.example | 45.6 GB of 49.5 GB (92%), no archive | Storage |
Accept risk |
| medium | breakglass@contoso.example | Excluded from "CA002 — All users: Require MFA" | Identity |
Accept risk |
| medium | Year end/Draft accounts FY26.xlsx (Clients / Documents) | Can be edited by partner@mason-legal.example | Sharing |
Accept risk |
| medium | Project Phoenix | Team, only owner is disabled (Bobby Marsh) | Groups |
Accept risk |
| medium | Some app | App holding Exchange Administrator | Admins |
Accept risk |
| medium | SharePoint and OneDrive | Anyone links are allowed | Sharing |
Accept risk |
| medium | joseph.morris@contoso.example | Licensed member, last signed in 15 Jun 2026 | Accounts |
Accept risk |
| medium | Tenant | Any user can grant any app access to their mail and files | Apps |
Accept risk |
Accepted risks 0
No accepted risks. When something is intentional, accept the risk from its row above and it moves here with the reason.
Latest collection 16 Oct 2026, 04:00 UTC. Severity, check and first-seen filters, sorting and hidden columns stay in the address, so a saved view or a download shows the same rows.