Testing

Configure who can invite guests and set collaboration restrictions.

Options: Allow all external domains, allow only specific domains, block specific domains, or block all.

Enable or disable guest access (requires proper Office 365 guest settings).

Define who can present (Everyone, organisers only, etc.) and set screen sharing options (Entire Screen, Single Application, or None).

Enable or disable control sharing during meetings for both internal and external users.

Only allow Microsoft apps while restricting external apps.

Specify allowed providers (e.g., Dropbox, Google Drive) if any.

Users receive notifications when an email is quarantined, with options to allow, block, or release.

Allow users to request the release of lower-risk quarantined messages.

Prohibits receipt/execution of attachments with executable file extensions.

Protects users from malicious websites by checking URLs in emails/documents.

Provides informative messages during email composition to prevent potential issues.

Alert on suspicious activities (e.g., elevation of privileges, invalid internal recipients).

Alert on suspicious activities (e.g., elevation of privileges, invalid internal recipients).

Decide if reported messages should be sent to a reporting mailbox or directly reported to Microsoft.

This includes: Blocking Macros (with an option to exclude Excel if needed) Disabling older Office file formats Enabling Protected View for files from untrusted locations Blocking unsafe files with executable content Disabling trusted network locations Legacy JScript blocking Enforcing file extension matching Blocking Excel XLL add-ins from untrusted sources

Define labels (Public – No Restriction, Public – View Only, Internal, Confidential, Restricted) and specify users for sensitive labels.

Focus on endpoint protection and advanced threat management.

Focus on endpoint protection and advanced threat management.

Specify an email ID to receive notifications.

Provide the email addresses for the users this policy should apply to.

Users in read-only mode can transfer files from USB to computer (allowed) but not vice versa.

Users in read-only mode can transfer files from USB to computer (allowed) but not vice versa.

Use default settings (minimum OS version, threat level, etc.) with actions for noncompliance.

Sync user settings (theme, taskbar, wallpaper, etc.) with Microsoft Entra ID.

Compare current email protection settings to Microsoft recommendations.

Set up two rings: Test Group (Ring 1) and all other users (Ring 2). Specify weekly install day and time.

Manage yearly Windows version upgrades (manual updates with each Microsoft release).

Regular check for critical quality updates (manual for unmanaged environments).

Option to automatically or manually approve driver updates.

Manage yearly Windows version upgrades (manual updates with each Microsoft release).

Manage yearly Windows version upgrades (manual updates with each Microsoft release).

Access will be restricted to web access only (e.g., via Microsoft Edge with a work profile).

Only Microsoft Outlook will be allowed; other email apps (e.g., Apple Mail, Samsung Mail) will be blocked.