SPAM filtering Office 365–Help shape a best practice

image

I hear a lot of people say that they don’t find Office 365 anti-spam filtering as good as other providers. My reply to that is – “Have you ever actually gone in and configured the settings from what is there by default?”. Unsurprisingly, the answer is always No.

The out of the box spam settings you get with Office 365 are designed for the “average” and probably configured for the least business interruption (i.e. less aggressive classification of what is spam). Thus, to get the optimal level of filtering you desire, it is recommended that you go and set the options the way that you want.

I have configured my tenant for the way I wish to handle spam but that is probably not exactly the best place for people to start. So with that in mind I thought that I’d call on the power of the crowd and offer up a survey were people can nominate what they consider to be major indicators of spam, based on the policy options that Microsoft provide. You’ll find that survey here:

http://bit.ly/o365spam

which I encourage you to fill out and share with everyone else.

The idea is that once the results are in I report back on an overall “best practices” starting policy that the majority would feel comfortable with. I can then also show you how to exactly configure that in Office 365.

So please take a moment to complete the survey and share you expertise and thought on the ‘best practice’ approach of configure anti-spam policies in Office 365.

You can find the details on the specific advanced spam filtering options in Office 365 here:

http://technet.microsoft.com/en-us/library/jj200750(v=exchg.150).aspx

CIAOPS Need to Know Azure Webinar–June 2018

pexels-photo-325229

This month I’ll take a look at the different VPN options you have in Azure and how you configure these. There’ll also be news, updates and Q and A. I hope to see you there.

June Azure Webinar Registrations

The details are:

CIAOPS Need to Know Azure Webinar – June 2018
Thursday 28th of June 2017
2pm – 3pm Sydney Time

All sessions are recorded and posted to the CIAOPS Academy.

There of course will also be open Q and A so make sure you bring your questions for me and I’ll do my best to answer them.

The CIAOPS Need to Know Webinars are free to attend but if you want to receive the recording of the session you need to sign up as a CIAOPS patron which you can do here:

http://www.ciaopspatron.com

or purchase them individually at:

http://www.ciaopsacademy.com/

Also feel free at any stage to email me directly via director@ciaops.com with your webinar topic suggestions.

I’d also appreciate you sharing information about this webinar with anyone you feel may benefit from the session.

CIAOPS Need to Know Office 365 Webinar–June

laptop-eyes-technology-computer

For June, I’m going to help you understand which Office 365 collaboration service you should use when. I’m going to give you a framework that you can apply across just about any organisation to help you make the most of services like Teams, SharePoint, OneDrive, Yammer and so on. I’ll also bring you up to date with everything happening in the Microsoft and Office 365 space as always.

You can register for free at:

June Webinar Registrations

The details are:

CIAOPS Need to Know Webinar – June 2018
Thursday 28th of June 2018
11am – 12am Sydney Time

All sessions are recorded and posted to the CIAOPS Academy.

There of course will also be open Q and A so make sure you bring your questions for me and I’ll do my best to answer them.

The CIAOPS Need to Know Webinars are free to attend but if you want to receive the recording of the session you need to sign up as a CIAOPS patron which you can do here:

http://www.ciaopspatron.com

or purchase them individually at:

http://www.ciaopsacademy.com/

Also feel free at any stage to email me directly via director@ciaops.com with your webinar topic suggestions.

I’d also appreciate you sharing information about this webinar with anyone you feel may benefit from the session.

New CIAOPS classroom training

pexels-photo-355223

I am pleased to announce the first CIAOPS hosted classroom training event.

How to migrate your SMB business to the Microsoft Cloud

Are you puzzled by the best approach to use when migrating a business to Microsoft 365 and Azure? Are you unsure of which services to use and when? Are you unsure how to cost cloud solutions? These and all your Microsoft cloud questions will be answered in this full day, face to face hands on training session. You’ll not only learn what products like Microsoft 365 and Azure are, you’ll learn how to effectively price solutions as well as frameworks that you can apply repeatedly to bring you success with migration, adoption and support. Best of all, you’ll see all the products in action via live demos.

This course is limited to 25 attendees, so hurry to secure your spot today!

Date = Thursday July 19th, 2018
Time = 9am – 5pm
Location = Cliftons Sydney, 60 Margaret St Sydney NSW 2000

Prices

Gold Patron = $149 inc
Silver Patron = $199 inc
Bronze Patron = $299 inc
Non Patron = $399 inc

More information about the CIAOPS Patron program can be found at www.ciaopspatron.com.

At the successful completion of this event it is planned to run this course at venues around Australia. To register your interest for a particular location please visit this link.

More information about the course and registration can be found here:

https://www.ciaopsacademy.com/p/how-to-migrate-your-smb-business-to-the-microsoft-cloud/

I hope to see you there.

Searching the Office 365 activity log for failed logins

image

Inside the Office 365 Security & Compliance center, under the Search & investigation menu option on the left you’ll find Audit log search as shown above.

To run a search simply provide a start and end date and select the Search button at the bottom of the screen. You can refine your search by selecting a list of different activities if you want but here we’ll leave the option set to Show results for all activities.

Once the search results are returned you’ll see lots and lots of items as shown above.

image

If you now select the Filter results button in the top right, each column will now display a box at the top that you can enter text into.

image

You can now go into the column headers and enter further filtering information. Here I have added the text ‘fail’ to the Activity column as shown. This produces two results for failed user logins.

Adding a filter now only shows the matches on the page.

image

You can also export the data into CSV file by selecting the Export results button next to the filter button.

You can either download everything in the audit logs (Download all results) or just your search query (Save loaded results). Here I have select the Save loaded results option.

image

This will then download a CSV file that you can open in Excel and will look like the above.

image

To make these easier to read you should convert the out to a table from the Insert tab and then select the Table icon.

image

Now that you have a table go to the top row of the Operations column and select the arrow to the right of this as shown. This will display the above menu. Uncheck the Select all option at the top of the list in the lower portion of the displayed dialog box.

image

Scroll down this same list and locate the UserLoginFailed option and select it.

This will now basically filter the whole tables of entries to only display those that have a match is UserLoginFailed in the operations column.

image

Which is exactly the result that you see obtained above and the same results we received from the console.

Thus, you can search the audit logs inside Office 365 directly from the portal but you can also export them to Excel to gain more power over how you wish to manipulate and report these events.

Need to Know podcast–Episode 182

In this episode Brenton does his first solo interview and speaks with Josh Pell who is currently head of Project and Solution Delivery at Bendigo Telco. As well as being a highly passionate, solution driven IT PMO professional, he has over 18 years providing fantastic experiences to his customers both internal and external across a multitude of industry. You can follow Josh on  Linkedin (https://www.linkedin.com/in/joshpell/) or Twitter (https://twitter.com/pell_josh). Brenton and I also cover off all the latest Microsoft Cloud news for you as well.

Take a listen and let us know what you think –feedback@needtoknow.cloud

You can listen directly to this episode at:

https://ciaops.podbean.com/e/episode-182-josh-pell/

Subscribe via iTunes at:

https://itunes.apple.com/au/podcast/ciaops-need-to-know-podcasts/id406891445?mt=2

The podcast is also available on Stitcher at:

http://www.stitcher.com/podcast/ciaops/need-to-know-podcast?refid=stpr

Don’t forget to give the show a rating as well as send us any feedback or suggestions you may have for the show.

Resources

@pell_josh

@askbrenton

@directorcia

SharePoint Virtual Summit

Introducing Microsoft training services

What’s new for your intranet in Office 365

Explore Build 2018 content with playlists

New updates for Microsoft Azure Storage Explorer

Preview of Azure AD Authentication for storage

Changes coming to PowerShell in Azure Cloud Shell

Selecting sites to include/exclude in Office 365 DLP

image

When you create a DLP policy you have the option to exclude or include certain SharePoint sites as shown above.

SNAGHTML6159fb77

If the sites you wish to include or exclude are anything but the default team site (i.e. https://tenant.sharepoint.com) then you need to manually search for the URL.

Thus, if you are looking to include or exclude a SharePoint site that was created by Microsoft Teams then you need to explicitly search for it by URL to add it to your list as shown above.