Forum Discussion

petersonal's avatar
petersonal
Brass Contributor
Oct 14, 2020

Excahnge online tenand admin increase security

Hello!

We would like to secure the admin role accounts for exchange online. I read about limiting acces to IP-s and countrys, but i did not managed to use any of them. Other way to set up MFA, but with many tenants and many amins it is not possible to use this except if a IP is whitelisted. I tried to set up this too but failed again. Is there any other way or option?

3 Replies

  • petersonal Hello, I don't really understand to be honest. But may I suggest the 'Security defaults' as it makes security administration much easier.

     

    https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/concept-fundamentals-security-defaults

    • petersonal's avatar
      petersonal
      Brass Contributor

      ChristianBergstrom Sorry for my bad description. My goal is to increase the security of the exchange online admin accounts. For example, if someone cracks the admin password and starts malicious activities we must be notified somehow. Better to do some preventive actions, like turning MultiFactorAuth on for admin accounts. Hope this clears my problem, if not please let me know.

      • ChristianBergstrom's avatar
        ChristianBergstrom
        Silver Contributor

        petersonal Hello, now I understand better. These links will provide guidance and best practices for securing your accounts.

         

        MFA support in Microsoft 365
        https://docs.microsoft.com/en-us/microsoft-365/admin/security-and-compliance/multi-factor-authentication-microsoft-365?view=o365-worldwide#mfa-support-in-microsoft-365 

         

        Protect your Microsoft 365 global administrator accounts
        https://docs.microsoft.com/en-us/microsoft-365/enterprise/protect-your-global-administrator-accounts?view=o365-worldwide 

         

        Security guidelines for assigning roles
        https://docs.microsoft.com/en-us/microsoft-365/enterprise/protect-your-global-administrator-accounts?view=o365-worldwide

         

Resources