I’ve taken the Exchange Online Remote Domains settings recommendations from the ASD Blueprint for Secure Cloud and created an online JSON settings file here:
https://github.com/directorcia/bp/blob/main/ASD/Exchange-Online/Mail-flow/remote-domains.json
I’ve then created a PowerShell script here:
https://github.com/directorcia/Office365/blob/master/asd-remotedomain-get.ps1
with documentation here:
https://github.com/directorcia/Office365/wiki/ASD-Remote-Domain-Configuration-Check
that reads the online JSON file (or uses a local version if you want to use that) and compares the recommended ASD settings to those in your own Exchange Online environment. Note, the script makes NO CHANGES to your environment, it simply reads the current settings.
It then produces the console output you see above and a HTML report like this:
You can refer to this page I also created:
https://github.com/directorcia/bp/wiki/Exchange-Online-Remote-Domain-Security-Controls
as to why these settings are important to the security of your M365 environment.
Look out for more scripts like this coming soon. I welcome any suggestion about improving this.
CIAOPS 