fast track to office 365: administration and reporting€¦ · cloud app security • cloud...

31
Liam Cleary CEO / Owner & Microsoft MVP SharePlicity Dave Matthews Systems Engineer Netwrix Corporation Fast Track to Office 365: Administration and Reporting

Upload: others

Post on 31-May-2020

2 views

Category:

Documents


0 download

TRANSCRIPT

Liam ClearyCEO / Owner & Microsoft MVPSharePlicity

Dave MatthewsSystems EngineerNetwrix Corporation

Fast Track to Office 365:

Administration and Reporting

Housekeeping

Type your question

here

Click “Send”

All attendees are on mute.

Ask your questions!

Questions will be answered during the session or in the Q&A at the end.

You will receive the slides and webinar recording in a follow-up email.

The webinar should take about 60 minutes.

Let’s get started!

Agenda

Understanding Office 365 Services

Manage and Control Services within Office 365

Data Loss Prevention, Supervisory Reporting and Auditing within Azure AD and Exchange

Advanced Security and Cloud Application Management

PowerShell for Security and Compliance

Using Netwrix Auditor to report and alert on Office 365 changes

Understanding

Office 365 Services

Office 365 Services

Azure Active

Directory

Azure Services

Office 365 Services

Office 365 Services

Admin Calendar DelveDynamics

365Excel Flow Forms

MyAnalytics OneDrive OneNote Outlook People Planner Power BI

PowerApps PowerPointSecurity &

ComplianceSharePoint StaffHub

Stream Sway Tasks

Teams To-Do Video Word Yammer

Office 365 Licensing

Office 365 Business Essentials

Office 365 Business Premium

Office 365 Enterprise E1

Office 365 Enterprise E3

Office 365 Enterprise E5

Office 365 Enterprise F1

Office 365 Enterprise F2

Office 365 Enterprise F3

Microsoft 365 E3 Microsoft 365 E5Service Specific

Licenses

Manage and Control Office 365 Services

Managing Office 365 Services

• Office 365: https://portal.office.com – then click Admino https://admin.microsoft.com/Adminportal/Home?source=applauncher#/homepage

• Azure Active Directory: https://aad.portal.azure.como https://aad.portal.azure.com/#@{Tenant Domain}

• From within Admin Center, expand Admin centers menuo Contextual based on licensing and enabled services

o Permission controlled

• Each link points to separate Administration location

Manage and Control Office 365 Services: Azure AD

Manage and Control Office 365 Services: SharePoint

Site Collection Administration Core Navigation Access Restriction

Manage and Control Office 365 Services: OneDrive

Management of Sharing, External Sharing, Synchronization and Mobile Device Restrictions

Manage and Control Office 365 Services: ExchangeRecipients

Permissions

Compliance

Organisation

Protection

Threats

Mail Flow

Mobile Device

Public Folders

Unified Messaging

Hybrid

Protection

Data Loss Prevention,

Supervisory Reporting,

And Audit Reports

Data Loss Prevention

Define LocationDefine Type of Content

Define Criteria

Set Actions

Enable Policy

Supervisory Review

Set Supervision Users

Set Non supervised

Users

Set Communication

Types

Set Percentage to Review

Set ReviewersEnable Policy

Audit Reports• Audit Log

• Azure Active Directory Audit Log

Advanced security Management and Cloud App Security

Advanced Security Management

Investigate activities that put your users and data at

risk, and take action to protect

Proactively hunt for threat activity across your devices

using powerful, customizable queries

Detect suspicious account activity on your network

Advanced Security Management

Insights into current Security position

Proactive guidance to increase Security position

Compare current score

Cloud App Security

• Cloud Discoveryo Discover all cloud use in your organization, including Shadow IT reporting and control and risk assessment

• Data Protection o Monitor and control your data in the cloud by gaining visibility, enforcing DLP policies, alerting, and

investigation

• Threat Protectiono Detect anomalous use and security incidents. Use behavioral analytics and advanced investigation tools to

mitigate risk and set policies and alerts to achieve maximum control over network cloud traffic

• Integrates directly within the wider Microsoft Cloud Services

Cloud App Security

Azure Active Directory

Microsoft FlowWindows Defender Advanced Threat

Protection

Azure Information Protection

Azure Security Center

Microsoft IntuneMicrosoft Secure

ScoreMicrosoft Intelligent

Security Graph

PowerShell for

Security and Compliance

Security & Compliance PowerShell Commands# Search Admin Log between two dates

Search-AdminAuditLog

-StartDate MM/DD/YYYY

-EndDate MM/DD/YYYY

# Search two dates/times, for Exchange Admin RecordsSearch-UnifiedAuditLog

-StartDate "MM/DD/YYYY HH:MM AM"

-EndDate "MM/DD/YYYY HH:MM PM"

-RecordType ExchangeAdmin

# Search between two dates, looking at SharePoint document viewsSearch-UnifiedAuditLog

-StartDate MM/DD/YYYY –EndDate MM/DD/YYYY

-RecordType SharePointFileOperation

-Operations FileAccessed

-SessionId "WordDocs_SharepointViews"

-SessionCommand ReturnNextPreviewPage

Security & Compliance PowerShell Commands

# Create New Data Loss Prevention Policy

New-DlpCompliancePolicy

-Name "Policy"

-Comment "Policy"

-SharePointLocation "https://{Url}", https://{Url}

-OneDriveLocation "https://{Url}", https://{Url}

-Mode Enable

# Create New Data Loss Prevention Rule

New-DlpComplianceRuleV2

-Name "Rule"

-Policy "Policy"

-ContentContainsSensitiveInformation @{Name="U.S. Social Security Number (SSN)"}

-BlockAccess $True

Security & Compliance PowerShell Commands

# Create New Role Group to Manage Mail

New-RoleGroup

-Name "Role Group Name"

-Roles "Mail Recipients", "Mail Enabled Public Folders"

-Members "User"

# Add User to existing Role Group

Add-RoleGroupMember

-Identity eDiscoveryManager

-Member "User"

# Add New Activity Alert

New-ActivityAlert

-Name "Sharing Alert"

-Operation sharingset, sharinginvitationcreated

-NotifyUser [email protected]

-UserId [email protected]

-Description "Sharing Notification"

Email:

[email protected]

Dave MatthewsSystems Engineer

Netwrix Auditor

Know Your Data. Protect What Matters.

About Netwrix Corporation

Year of foundation: 2006

Headquarters location: Irvine, California

Global user base: over 300,000

Recognition:

7 years among the fastest growing

software companies in the US

More than 140 industry awards

What’s Next?

Visit our next sessions:

‘Controlling Access and Protecting Data’ on March 28 @ 2 PM GMT / 3 PM CET

‘Q&A session’ on April 2 @ 2 PM BST / 3 PM CEST

Virtual Appliance: get Netwrix Auditor up and running in minutes

netwrix.com/go/appliance

Online Demo: explore Netwrix Auditor right from your browser, without having to install the product

netwrix.com/browser_demo

Contact Sales: obtain more information about Netwrix Auditor

netwrix.com/contactsales

www. .com

Thank you!

Liam ClearyCEO / Owner & Microsoft MVPSharePlicity

Dave MatthewsSystems EngineerNetwrix Corporation