Recent Discussions
CMMC Compliance without GCC High
Hello MS team, As a government contractor we regularly access CUI and are required to be CMMC level 3 compliant. Currently we run Office 365 on our systems and do not intend on upgrading to GCC High. What configurations, settings or group policies should a contractor put into place in order the be level 3 compliant w/out GCC High. I am looking for guidance in AU, CM, MP, SC & SI domains. Thank you in advanceWelcome to the Public Sector community!
Hi all, Welcome to the Public Sector Community! This is a space to connect and discuss the solutions, challenges and best practices for IT in the public sector. A special thanks to Tracy Moran for suggesting this space in our Ideas Exchange. Thanks for your help keeping this community a vibrant and useful place!
That's a wrap: Microsoft Teams Government AMA
Thank you for joining us and voicing your questions and feedback during this fun and action-packed hour. Please note that you won't be able to ask new questions in this space until our next live event. We will be disabling posting and further comments in this AMA space but encourage you to post any new questions or follow up in our Public Sector, Local/State Government Space. We will put together a summary document of what was covered during and share it in this group. See you next time!Extending the Shared Responsibility Model into CMMC
A quick review of Compliance Manager (or the Office 365 MT FedRAMP system security plan) shows that Microsoft has documented the areas where customer orgs need to implement their own controls (policies, procedures, tenant configurations) in order to fully satisfy a FedRAMP control requirement. I know that CMMC is different. We aren't focusing on just the cloud system, but rather the entire organization, its people, information, technology and facilities. That distinction aside: how much do we think Microsoft's security capabilities can be "inherited" by subscriber organizations for use in a CMMC assessment? How much still needs to be documented, performed, and managed by the organization itself? More than FedRAMP? Less? 42?
腾龙公司游戏网址
维《T L 9 1 9 9 8》公司开户罔纸《T L 0 6 8 . v i p 》 腾龙公司是扎根于 缅甸果敢自治区的多元化企业秉持 诚信 创新 共赢的理念， 经过多年发展业务以涵盖 房地产 基建 旅游 物流运输 以及农产品加工等多个领域， 在房地产领域公司凭借专业团队，打造出多个现代化住宅与商业化项目， 推动果敢老街城市化和公共设施建设，助力当地基础设施升级， 旅游板块投资建设高端酒店和绿发展度假村，位游客带来舒适体验， 带动区域旅游发展，物流运输上建立高效物流网络， 为企业和居民提供便捷服务 农产品加工中引入新建技术， 提升农产品附加值 增加农民收入 不仅如此 公司始终将社会责任抗在肩头。 积极投身公益事业 在教育医疗和环境保护等领域大力支持， 为果敢地区发展贡献力量，为公司将持续创新拓展业务版图， 促进区域繁荣 在新时代书写更多辉煌篇章 下期科普腾龙公司现状 带大家更多了解缅甸果敢老街Win32 Content Prep tool doesn't work with FIPS mode
This issue on GitHub has been languishing unacknowledged for the past three years. Since the elder days of yore, the Win32 Content Prep tool - the only option for deploying non-MSI applications through Intune - has been unable to operate on and endpoint which has been FIPSed. This process has caused much consternation among those of us who must, by reason of government directive, FIPS ourselves and our endpoints for the security of the nation. I would humbly beseech those who create the great and powerful content prep tool to update it with support for FIPS so that those of us who wish to use it can do so. GitHub Reference Link https://github.com/microsoft/Microsoft-Win32-Content-Prep-Tool/issues/33
Documentation Templates and Snippets
Can Microsoft provide templates, snippets, and/or examples of documentation for each of the CMMC controls that the GCC High environment helps meet? For example, AU 3.048 - Collect audit info into 1 or more central repos. The recommendation is to use Azure Sentinel, which we are implementing, but having documentation examples that we can copy/paste/modify into our documentation for certification purposes would be very helpful. Obviously, this could be very different for each customer, which is where a template of sorts with a full example would be very helpful.GCC Meetup in Washington DC
I am looking to host an interactive event to generate conversations around compliance (records/retention), Teams, PowerApps, PowerAutomate, and/or adoption programs for GCC customers in the Washington DC area. The first challenge is met, I have a good space that is located close to a metro station. Part two is getting feedback on topics. What would be useful? I am favoring small table conversations on a few key topics/questions and then coming back together to share the answers or observations. This event could then turn into the beginnings of a Washington DC Office 365 GCC user group. We just need to figure out who wants to help at the decision and planning level and who is an interested participant. We have a lot of MVPs, some very active companies, and some solid Microsoft contacts that we can leverage as speakers once we decide some topics that are meaningful and are real challenges. Share your thoughts and lets see if we can get this launched!
Recent Blogs
- Microsoft’s Scientific Partnership Advancing Research & Knowledge (SPARK) is a mission-aligned program designed to help DOE National Laboratories accelerate AI-for-science outcomes for the Genesis Mi...Jun 25, 2026
- A colleague reached out to me to help with a customer's Logic App issue. They were trying to make what looked like a simple HTTP request to a Jira API but were getting back an SSL error. The root of ...May 05, 2026
