fast track to office 365: administration and reporting€¦ · cloud app security • cloud...
TRANSCRIPT
Liam ClearyCEO / Owner & Microsoft MVPSharePlicity
Dave MatthewsSystems EngineerNetwrix Corporation
Fast Track to Office 365:
Administration and Reporting
Housekeeping
Type your question
here
Click “Send”
All attendees are on mute.
Ask your questions!
Questions will be answered during the session or in the Q&A at the end.
You will receive the slides and webinar recording in a follow-up email.
The webinar should take about 60 minutes.
Let’s get started!
Agenda
Understanding Office 365 Services
Manage and Control Services within Office 365
Data Loss Prevention, Supervisory Reporting and Auditing within Azure AD and Exchange
Advanced Security and Cloud Application Management
PowerShell for Security and Compliance
Using Netwrix Auditor to report and alert on Office 365 changes
Office 365 Services
Admin Calendar DelveDynamics
365Excel Flow Forms
MyAnalytics OneDrive OneNote Outlook People Planner Power BI
PowerApps PowerPointSecurity &
ComplianceSharePoint StaffHub
Stream Sway Tasks
Teams To-Do Video Word Yammer
Office 365 Licensing
Office 365 Business Essentials
Office 365 Business Premium
Office 365 Enterprise E1
Office 365 Enterprise E3
Office 365 Enterprise E5
Office 365 Enterprise F1
Office 365 Enterprise F2
Office 365 Enterprise F3
Microsoft 365 E3 Microsoft 365 E5Service Specific
Licenses
Managing Office 365 Services
• Office 365: https://portal.office.com – then click Admino https://admin.microsoft.com/Adminportal/Home?source=applauncher#/homepage
• Azure Active Directory: https://aad.portal.azure.como https://aad.portal.azure.com/#@{Tenant Domain}
• From within Admin Center, expand Admin centers menuo Contextual based on licensing and enabled services
o Permission controlled
• Each link points to separate Administration location
Manage and Control Office 365 Services: SharePoint
Site Collection Administration Core Navigation Access Restriction
Manage and Control Office 365 Services: OneDrive
Management of Sharing, External Sharing, Synchronization and Mobile Device Restrictions
Manage and Control Office 365 Services: ExchangeRecipients
Permissions
Compliance
Organisation
Protection
Threats
Mail Flow
Mobile Device
Public Folders
Unified Messaging
Hybrid
Protection
Data Loss Prevention
Define LocationDefine Type of Content
Define Criteria
Set Actions
Enable Policy
Supervisory Review
Set Supervision Users
Set Non supervised
Users
Set Communication
Types
Set Percentage to Review
Set ReviewersEnable Policy
Advanced Security Management
Investigate activities that put your users and data at
risk, and take action to protect
Proactively hunt for threat activity across your devices
using powerful, customizable queries
Detect suspicious account activity on your network
Advanced Security Management
Insights into current Security position
Proactive guidance to increase Security position
Compare current score
Cloud App Security
• Cloud Discoveryo Discover all cloud use in your organization, including Shadow IT reporting and control and risk assessment
• Data Protection o Monitor and control your data in the cloud by gaining visibility, enforcing DLP policies, alerting, and
investigation
• Threat Protectiono Detect anomalous use and security incidents. Use behavioral analytics and advanced investigation tools to
mitigate risk and set policies and alerts to achieve maximum control over network cloud traffic
• Integrates directly within the wider Microsoft Cloud Services
Cloud App Security
Azure Active Directory
Microsoft FlowWindows Defender Advanced Threat
Protection
Azure Information Protection
Azure Security Center
Microsoft IntuneMicrosoft Secure
ScoreMicrosoft Intelligent
Security Graph
Security & Compliance PowerShell Commands# Search Admin Log between two dates
Search-AdminAuditLog
-StartDate MM/DD/YYYY
-EndDate MM/DD/YYYY
# Search two dates/times, for Exchange Admin RecordsSearch-UnifiedAuditLog
-StartDate "MM/DD/YYYY HH:MM AM"
-EndDate "MM/DD/YYYY HH:MM PM"
-RecordType ExchangeAdmin
# Search between two dates, looking at SharePoint document viewsSearch-UnifiedAuditLog
-StartDate MM/DD/YYYY –EndDate MM/DD/YYYY
-RecordType SharePointFileOperation
-Operations FileAccessed
-SessionId "WordDocs_SharepointViews"
-SessionCommand ReturnNextPreviewPage
Security & Compliance PowerShell Commands
# Create New Data Loss Prevention Policy
New-DlpCompliancePolicy
-Name "Policy"
-Comment "Policy"
-SharePointLocation "https://{Url}", https://{Url}
-OneDriveLocation "https://{Url}", https://{Url}
-Mode Enable
# Create New Data Loss Prevention Rule
New-DlpComplianceRuleV2
-Name "Rule"
-Policy "Policy"
-ContentContainsSensitiveInformation @{Name="U.S. Social Security Number (SSN)"}
-BlockAccess $True
Security & Compliance PowerShell Commands
# Create New Role Group to Manage Mail
New-RoleGroup
-Name "Role Group Name"
-Roles "Mail Recipients", "Mail Enabled Public Folders"
-Members "User"
# Add User to existing Role Group
Add-RoleGroupMember
-Identity eDiscoveryManager
-Member "User"
# Add New Activity Alert
New-ActivityAlert
-Name "Sharing Alert"
-Operation sharingset, sharinginvitationcreated
-NotifyUser [email protected]
-UserId [email protected]
-Description "Sharing Notification"
About Netwrix Corporation
Year of foundation: 2006
Headquarters location: Irvine, California
Global user base: over 300,000
Recognition:
7 years among the fastest growing
software companies in the US
More than 140 industry awards
What’s Next?
Visit our next sessions:
‘Controlling Access and Protecting Data’ on March 28 @ 2 PM GMT / 3 PM CET
‘Q&A session’ on April 2 @ 2 PM BST / 3 PM CEST
Virtual Appliance: get Netwrix Auditor up and running in minutes
netwrix.com/go/appliance
Online Demo: explore Netwrix Auditor right from your browser, without having to install the product
netwrix.com/browser_demo
Contact Sales: obtain more information about Netwrix Auditor
netwrix.com/contactsales