Hardening items

8 recommendations. Filter by category, criticality, maturity tier, or system.

Critical (3)High (5)Medium (0)Low (0)

Require multi-factor authentication for all users and block legacy protocols (IMAP, POP, SMTP AUTH) that bypass MFA entirely.

Updated Jul 9, 2026Microsoft 365 · Microsoft Entra ID · Microsoft Exchange Online

Give Domain Admins and other Tier 0 operators a dedicated, locked-down workstation that never touches email, browsing, or productivity apps.

Updated Jul 9, 2026Microsoft Windows 10/11 · Microsoft Active Directory · Microsoft Entra ID