DIY M365 Security Walkthrough
Configure the top 10 Microsoft 365 security settings yourself. Step-by-step instructions, troubleshooting tips, and verification checks.
$49 — Instant PDF Download
Get the WalkthroughWhat's Inside
10 security configurations, each with screenshots, step-by-step instructions, and a verification check so you know it worked.
1. Enable MFA for all users
The exact admin center path, enrollment steps, and how to handle users who push back.
2. Disable legacy authentication
Which protocols to block, where to find them, and how to test that nothing breaks.
3. Configure conditional access policies
Block impossible logins and enforce device compliance without locking out your team.
4. Block external email forwarding
Stop attackers from silently forwarding your inbox to an external address.
5. Enable anti-phishing policies
Set up impersonation protection and mailbox intelligence to catch spoofed emails.
6. Enable Safe Attachments sandboxing
Detonate suspicious files in a sandbox before they reach your users.
7. Enable Safe Links URL scanning
Rewrite and scan every URL in real time so malicious links get blocked on click.
8. Enable audit logging
Turn on unified audit logs so every admin action and mailbox access is recorded.
9. Remove stale external users
Find and remove former contractors, test accounts, and guest users that shouldn't have access.
10. Configure DLP policies for sensitive data
Block emails containing credit card numbers, SSNs, and other regulated data from leaving your org.
Free Guide vs. DIY Walkthrough
The free guide tells you what to secure. The walkthrough shows you how.
Who This Is For
- ✓ IT managers at small businesses who need to harden M365 but don't have a dedicated security team.
- ✓ Business owners preparing for cyber insurance renewal who need to prove specific M365 controls are enabled.
- ✓ MSPs and consultants who want a repeatable configuration checklist for client tenants.
- ✓ Anyone who read the free guide and wants the exact steps to implement each setting themselves.
Ready to Secure Your Tenant?
10 configurations. Step-by-step instructions. Verification checks. One PDF. $49.
Get the WalkthroughNot Ready to DIY?
If you'd rather have a security engineer deploy and verify every setting for you, M365Shield handles the entire baseline in 72 hours. You get documented proof of every configuration for your insurance carrier.
Check My Tenant RiskGet the Free M365 Security Settings Guide
Not ready to buy? Start with the free guide — it covers what to secure and why. The DIY walkthrough picks up where it leaves off.
No spam. Unsubscribe anytime.
Frequently Asked Questions
The walkthrough is a PDF document. You'll receive an instant download link after purchase. It's designed to be used side-by-side with your M365 admin center — open the PDF on one screen, follow along in the portal on the other.
No. The free guide tells you what to secure and why each setting matters. The DIY walkthrough shows you how — with step-by-step admin center instructions, screenshot walkthroughs, troubleshooting tips, and verification checks for each setting.
Each configuration includes a troubleshooting section that covers the most common issues. If you hit something the guide doesn't cover, you can always switch to the managed deployment — M365Shield will handle the full baseline for you.
Most settings work with Microsoft 365 Business Premium. A few advanced features (like Safe Attachments and Safe Links) require Defender for Office 365, which is included in Business Premium and E5. The guide clearly marks which license is needed for each setting.