Embed Size (px)
Citation preview
Liam ClearyCEO / Owner & Microsoft MVPSharePlicity
Jeff MelnickSolutions EngineerNetwrix Corporation
Fast Track to Office 365:
Administration and Reporting
Agenda
Understanding Office 365 Services
Manage and Control Services within Office 365
Data Loss Prevention, Supervisory Reporting and Auditing within Azure AD and Exchange
Advanced Security and Cloud Application Management
PowerShell for Security and Compliance
Using Netwrix Auditor to report and alert on Office 365 changes
Understanding
Office 365 Services
Office 365 Services
Azure Active
Directory
Azure Services
Office 365 Services
Office 365 Services
Admin Calendar DelveDynamics
365Excel Flow Forms
MyAnalytics OneDrive OneNote Outlook People Planner Power BI
PowerApps PowerPointSecurity &
ComplianceSharePoint StaffHub
Stream Sway Tasks
Teams To-Do Video Word Yammer
Office 365 Licensing
Office 365 Business Essentials
Office 365 Business Premium
Office 365 Enterprise E1
Office 365 Enterprise E3
Office 365 Enterprise E5
Office 365 Enterprise F1
Office 365 Enterprise F2
Office 365 Enterprise F3
Microsoft 365 E3 Microsoft 365 E5Service Specific
Licenses
Manage and Control
Office 365 Services
Managing Office 365 Services
• Office 365: https://portal.office.com – then click Admino https://admin.microsoft.com/Adminportal/Home?source=applauncher#/homepage
• Azure Active Directory: https://aad.portal.azure.como https://aad.portal.azure.com/#@{Tenant Domain}
• From within Admin Center, expand Admin centers menuo Contextual based on licensing and enabled services
o Permission controlled
• Each link points to separate Administration location
Manage and Control Office 365 Services: Azure AD
Manage and Control Office 365 Services: SharePoint
Site Collection Administration Core Navigation Access Restriction
Manage and Control Office 365 Services: OneDrive
Management of Sharing, External Sharing, Synchronization and Mobile Device Restrictions
Manage and Control Office 365 Services: ExchangeRecipients
Permissions
Compliance
Organisation
Protection
Threats
Mail Flow
Mobile Device
Public Folders
Unified Messaging
Hybrid
Protection
Data Loss Prevention,
Supervisory Reporting,
And Audit Reports
Data Loss Prevention
Define LocationDefine Type of Content
Define Criteria
Set Actions
Enable Policy
Supervisory Review
Set Supervision Users
Set Non supervised
Users
Set Communication
Types
Set Percentage to Review
Set ReviewersEnable Policy
Audit Reports• Audit Log
• Azure Active Directory Audit Log
Advanced security Management and Cloud App Security
Advanced Security Management
Investigate activities that put your users and data at
risk, and take action to protect
Proactively hunt for threat activity across your devices
using powerful, customizable queries
Detect suspicious account activity on your network
Advanced Security Management
Insights into current Security position
Proactive guidance to increase Security position
Compare current score
Cloud App Security
• Cloud Discoveryo Discover all cloud use in your organization, including Shadow IT reporting and control and risk assessment
• Data Protection o Monitor and control your data in the cloud by gaining visibility, enforcing DLP policies, alerting, and
investigation
• Threat Protectiono Detect anomalous use and security incidents. Use behavioral analytics and advanced investigation tools to
mitigate risk and set policies and alerts to achieve maximum control over network cloud traffic
• Integrates directly within the wider Microsoft Cloud Services
Cloud App Security
Azure Active Directory
Microsoft FlowWindows Defender Advanced Threat
Protection
Azure Information Protection
Azure Security Center
Microsoft IntuneMicrosoft Secure
ScoreMicrosoft Intelligent
Security Graph
PowerShell for Security and Compliance
Security & Compliance PowerShell Commands# Search Admin Log between two dates
Search-AdminAuditLog
-StartDate MM/DD/YYYY
-EndDate MM/DD/YYYY
# Search two dates/times, for Exchange Admin RecordsSearch-UnifiedAuditLog
-StartDate "MM/DD/YYYY HH:MM AM"
-EndDate "MM/DD/YYYY HH:MM PM"
-RecordType ExchangeAdmin
# Search between two dates, looking at SharePoint document viewsSearch-UnifiedAuditLog
-StartDate MM/DD/YYYY –EndDate MM/DD/YYYY
-RecordType SharePointFileOperation
-Operations FileAccessed
-SessionId "WordDocs_SharepointViews"
-SessionCommand ReturnNextPreviewPage
Security & Compliance PowerShell Commands
# Create New Data Loss Prevention Policy
New-DlpCompliancePolicy
-Name "Policy"
-Comment "Policy"
-SharePointLocation "https://{Url}", https://{Url}
-OneDriveLocation "https://{Url}", https://{Url}
-Mode Enable
# Create New Data Loss Prevention Rule
New-DlpComplianceRuleV2
-Name "Rule"
-Policy "Policy"
-ContentContainsSensitiveInformation @{Name="U.S. Social Security Number (SSN)"}
-BlockAccess $True
Security & Compliance PowerShell Commands
# Create New Role Group to Manage Mail
New-RoleGroup
-Name "Role Group Name"
-Roles "Mail Recipients", "Mail Enabled Public Folders"
-Members "User"
# Add User to existing Role Group
Add-RoleGroupMember
-Identity eDiscoveryManager
-Member "User"
# Add New Activity Alert
New-ActivityAlert
-Name "Sharing Alert"
-Operation sharingset, sharinginvitationcreated
-NotifyUser [email protected]
-UserId [email protected]
-Description "Sharing Notification"
Financial
7 years among the fastest growing
software companies in the US
More than 150 industry awards
About Netwrix
Year of foundation: 2006
Headquarters location: Irvine, California
Global customer base: over 10,000
Recognition:
Education
Business Services
Healthcare & Pharmaceutical Federal, State, Local, Government
Industrial and Technology
Netwrix Data Sources
Active Directory
Windows File Servers
Oracle Database
Dell EMC SQL Server
Exchange
NetApp
Office 365
SharePoint sMySQLOpenTextContent Suite
WebsitesPostgreSQL
Box
Salesforce
Google Drive
Windows Server
VMware
Network Devices
Azure AD
Group Policy
Nutanix Files
Audit
Data Discovery and Classification
Demonstration
What’s Next?
• Virtual Appliance: get Netwrix up and running in minutes
netwrix.com/go/appliance
• Online Demo: explore Netwrix right from your browser, without having to install the product
netwrix.com/browser_demo
Visit our next session:
‘Controlling Access and Protecting Data’ on August 15 @ 9 AM PT / 12 PM ET
netwrix.com/fast_track_to_office_365
www. .com
Questions
www. .com
Thank you!
Liam ClearyCEO / Owner & Microsoft MVPSharePlicity
Jeff MelnickSolutions EngineerNetwrix Corporation
