SOLVED
Home

PowerShell and Office 365 Secure Score

%3CLINGO-SUB%20id%3D%22lingo-sub-46578%22%20slang%3D%22en-US%22%3EPowerShell%20and%20Office%20365%20Secure%20Score%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-46578%22%20slang%3D%22en-US%22%3EHello!%20%3A)%3C%2Fimg%3E%3CBR%20%2F%3E%3CBR%20%2F%3EI%20am%20wondering%20if%20there%20is%20an%20article%20that%20describes%20how%20to%20implement%20suggestions%20from%20Secure%20Score%20via%20PowerShell%3F%20I%20have%20been%20asked%20to%20find%20a%20way%20to%20%22standardize%22%20security%20for%20the%20multiple%20tenants%20we%20have%20using%20PowerShell%2C%20and%20in%20a%20way%20that%20also%20positively%20impacts%20our%20Secure%20Score.%3CBR%20%2F%3E%3CBR%20%2F%3EAny%20thoughts%20or%20ideas%20appreciated!%20%3CBR%20%2F%3E%3CBR%20%2F%3EThanx%3CBR%20%2F%3E%2C--Gene.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-181641%22%20slang%3D%22en-US%22%3ERe%3A%20PowerShell%20and%20Office%20365%20Secure%20Score%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-181641%22%20slang%3D%22en-US%22%3E%3CP%3Ehave%20you%20seen%20this%20one%3F%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fgallery.technet.microsoft.com%2FOffice-365-Secure-Score-8a81f6af%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fgallery.technet.microsoft.com%2FOffice-365-Secure-Score-8a81f6af%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-47103%22%20slang%3D%22en-US%22%3ERe%3A%20PowerShell%20and%20Office%20365%20Secure%20Score%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-47103%22%20slang%3D%22en-US%22%3E%3CP%3EHi%2C%3C%2FP%3E%3CP%3EI%20started%20some%20efforts%20to%20document%20the%20PowerShell%20scripts%20for%20some%20of%20the%20SecureScore%20actions.%20You%20can%20find%20the%20blog%20here%3A%20%3CA%20href%3D%22http%3A%2F%2Fwww.nubo.eu%2Fen%2Fblog%2F2017%2F01%2FSecuring-Your-Office-365-Environment%2F%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttp%3A%2F%2Fwww.nubo.eu%2Fen%2Fblog%2F2017%2F01%2FSecuring-Your-Office-365-Environment%2F%3C%2FA%3E.%20Feel%20free%20to%20send%20some%20comments%20or%20suggestions.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Ebr%2C%3C%2FP%3E%3CP%3EPatrick%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-46623%22%20slang%3D%22en-US%22%3ERe%3A%20PowerShell%20and%20Office%20365%20Secure%20Score%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-46623%22%20slang%3D%22en-US%22%3E%3CP%3EThanks%20so%20much%20for%20this!%26nbsp%3B%20I%20was%20just%20asked%20to%20do%20this%2C%20so%20I%20will%20start%20diggin'%20through%20the%20scripts%20provided%20via%20GitHub.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIf%20you%20remember%20anything%20else%2C%20please%20let%20me%20know.%26nbsp%3B%20%3B)%3C%2Fimg%3E%26nbsp%3B%20Thanks%20again!%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E--Gene.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-46600%22%20slang%3D%22en-US%22%3ERe%3A%20PowerShell%20and%20Office%20365%20Secure%20Score%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-46600%22%20slang%3D%22en-US%22%3E%3CP%3EHey%20Gene%2C%3C%2FP%3E%0A%3CP%3EThanks%20for%20reaching%20out.%20We%20do%20have%20the%20Secure%20Score%20data%20available%20via%20API%20now%3A%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fblogs.technet.microsoft.com%2Foffice365security%2Fusing-the-office-365-secure-score-api%2F%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fblogs.technet.microsoft.com%2Foffice365security%2Fusing-the-office-365-secure-score-api%2F%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EBut%2C%20your%20point%20is%20interesting.%20We%20actually%20haven't%20implemented%20any%20of%20the%20remediation%20actions%20in%20a%20neat%2C%20clean%20powershell%2C%20but%20we%20do%20have%20some%20resources.%26nbsp%3B%3C%2FP%3E%0A%3CP%3EFirst%2C%20if%20you%20want%20to%20collect%20state%20data%20in%20powershell%2C%20I've%20uploaded%20a%20very%20old%2C%20PM-authored%20version%20of%20the%20very%20Alpha%20Secure%20Score%20here%3A%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fgithub.com%2FOfficeDev%2FO365-Cloud-Sec-Tooling%2Fblob%2Fmaster%2FSecurescore%2FDEPRECATED-LEGACYSecureScoreCollector.zip%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fgithub.com%2FOfficeDev%2FO365-Cloud-Sec-Tooling%2Fblob%2Fmaster%2FSecurescore%2FDEPRECATED-LEGACYSecureScoreCollector.zip%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3ESecond%2C%20we%20do%20have%20some%20remediation%20automation%20in%20powershell%20scripts%20here%3A%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fgithub.com%2FOfficeDev%2FO365-InvestigationTooling%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fgithub.com%2FOfficeDev%2FO365-InvestigationTooling%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EThanks!%3C%2FP%3E%0A%3CP%3EBrandon%20Koeller%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-46595%22%20slang%3D%22en-US%22%3ERe%3A%20PowerShell%20and%20Office%20365%20Secure%20Score%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-46595%22%20slang%3D%22en-US%22%3E%3CP%3EIt's%20a%20good%20idea%20and%20many%20of%20the%20recommendations%20indeed%20can%20be%20scripted%20via%20PowerShell.%20Not%20all%20workloads%20will%20be%20able%20to%20support%20this%20however%2C%20and%20not%20all%20actions%20are%20a%20good%20match%20for%20PowerShell%20(for%20example%2C%20the%20periodic%20Review%20type%20of%20actions).%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAll%20the%20actions%20do%20offer%20the%20additional%20info%20via%20the%20Details%20page%20though%2C%20especially%20in%20the%20case%20of%20Exchange%20it's%20very%20easy%20to%20get%20to%20the%20PowerShell%20cmdlet%20from%20there%20-%20simply%20use%20the%20%22Show%20cmdlet%20logging%22%20functionality%20in%20the%20EAC.%20For%20other%20workloads%2C%20you%20can%20still%20get%20to%20the%20documentation%20and%20simply%20search%20on%20how%20to%20perform%20the%20relevant%20actions%20via%20PowerShell.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EPerhaps%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F2898%22%20target%3D%22_blank%22%3E%40Brandon%20Koeller%3C%2FA%3E%26nbsp%3Bmight%20actually%20have%20a%20thing%20or%20two%20to%20say%20about%20this%2C%20I%20know%20that%20the%20early%20version%20of%20the%20Secure%20Score%20tool%20was%20PowerShell%20based%2C%20so%20it%20should%20be%20relatively%20easy%20to%20adapt%20it%20from%20%22just%20look%22%20to%20%22do%20stuff%22%20%3A)%3C%2Fimg%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E
Gene McKelvey
New Contributor
Hello! :)

I am wondering if there is an article that describes how to implement suggestions from Secure Score via PowerShell? I have been asked to find a way to "standardize" security for the multiple tenants we have using PowerShell, and in a way that also positively impacts our Secure Score.

Any thoughts or ideas appreciated! :beaming_face_with_smiling_eyes:

Thanx,
--Gene.
5 Replies

It's a good idea and many of the recommendations indeed can be scripted via PowerShell. Not all workloads will be able to support this however, and not all actions are a good match for PowerShell (for example, the periodic Review type of actions).

 

All the actions do offer the additional info via the Details page though, especially in the case of Exchange it's very easy to get to the PowerShell cmdlet from there - simply use the "Show cmdlet logging" functionality in the EAC. For other workloads, you can still get to the documentation and simply search on how to perform the relevant actions via PowerShell.

 

Perhaps @Brandon Koeller might actually have a thing or two to say about this, I know that the early version of the Secure Score tool was PowerShell based, so it should be relatively easy to adapt it from "just look" to "do stuff" :)

Solution

Hey Gene,

Thanks for reaching out. We do have the Secure Score data available via API now: https://blogs.technet.microsoft.com/office365security/using-the-office-365-secure-score-api/

 

But, your point is interesting. We actually haven't implemented any of the remediation actions in a neat, clean powershell, but we do have some resources. 

First, if you want to collect state data in powershell, I've uploaded a very old, PM-authored version of the very Alpha Secure Score here: https://github.com/OfficeDev/O365-Cloud-Sec-Tooling/blob/master/Securescore/DEPRECATED-LEGACYSecureS...

 

Second, we do have some remediation automation in powershell scripts here: https://github.com/OfficeDev/O365-InvestigationTooling

 

Thanks!

Brandon Koeller

 

Thanks so much for this!  I was just asked to do this, so I will start diggin' through the scripts provided via GitHub.

 

If you remember anything else, please let me know.  ;)  Thanks again!

 

--Gene.

Hi,

I started some efforts to document the PowerShell scripts for some of the SecureScore actions. You can find the blog here: http://www.nubo.eu/en/blog/2017/01/Securing-Your-Office-365-Environment/. Feel free to send some comments or suggestions.

 

br,

Patrick

Related Conversations
How to Prevent Teams from Auto-Launch
chenrylee in Microsoft Teams on
28 Replies
Early preview of Microsoft Edge group policies
Sean Lyndersay in Discussions on
65 Replies
*Updated 9/3* Syncing in Microsoft Edge Preview Channels
Elliot Kirk in Articles on
201 Replies
Tabs and Dark Mode
cjc2112 in Discussions on
2 Replies