Journal
Cloud EngineeringDraft
Creating a Secure Microsoft 365 Environment from Scratch
A planned hands-on lab building a new Microsoft 365 tenant with secure defaults from day one.
James Houlder1 min read
On this page
Draft. Lab in progress — sections below are the planned structure.
Objectives
- Stand up a fresh tenant with a clear admin model
- Enforce phishing-resistant MFA for administrators
- Baseline Conditional Access policies
- Enrol a test device with Intune
Break-glass accounts first
Planned notes on emergency access accounts and how to monitor their use.
Checking security defaults
Connect-MgGraph -Scopes "Policy.Read.All"
Get-MgPolicyIdentitySecurityDefaultEnforcementPolicy | Select-Object IsEnabled
Conditional Access baseline
To be documented as the lab progresses.
Lessons learned
To be written.
- #microsoft-365
- #entra-id
- #conditional-access
- #intune
Related articles
Cloud EngineeringDraft
Microsoft Entra ID: Understanding Identity and Access Management
A practical primer on how Entra ID models users, groups, roles and access — written while learning it properly.
1 min
Open SourceDraft
DNS Daddy: Building an Open-Source Protective DNS Resolver
The thinking behind DNS Daddy — an open-source project exploring protective DNS and threat intelligence.
1 min
NetworkingDraft
Network Segmentation with pfSense and UniFi
Designing a segmented home-lab network with VLANs, firewall rules and sensible trust boundaries.
1 min