← Back to Tenant Insights

Demo report · Saved snapshot. Some tables contain only the rows captured in this copy; affected tables are labelled.

Microsoft 365 Tenant Report - Turrito
Generated: 2026-06-29 12:44:04
31
Total Users
19
Licensed Users
1
Guest Users
28
Exchange Mailboxes
3
Managed Devices
77.8%
Secure Score
Key Insights
Security Benchmark
Secure Score Comparison

Your Organization: 286.48 of 368 (77.85%)

All Tenants Average: 51.13%

Similar-sized Organizations: 45.92%

Security Issues
14 user(s) with enabled accounts don't have MFA registeredHigh
Users with enabled accounts should register for MFA to improve security
1 application(s) have high privileged permissionsHigh
Review and validate these applications and their permission requirements
1 application(s) have expired or expiring credentialsHigh
Update expired passwords and certificates to prevent authentication failures
1 shared mailbox(es) have sign-in enabledHigh
Shared mailboxes should not allow direct sign-in for security reasons. Disable account sign-in and access via delegates only.
3 device(s) are non-compliant (100%)High
Non-compliant devices may not meet security requirements. Review compliance policies and device status.
Email Security
1 domain(s) don't have DMARC recordsMedium
DMARC helps prevent email spoofing and provides reporting. Domains without DMARC: robinm365lab.myo365.site
1 domain(s) don't have DKIM configuredMedium
DKIM helps verify that messages aren't forged. Domains without DKIM: robinm365lab.myo365.site
License Efficiency
17 licensed users have no activity in the last 90 daysHigh
These users hold paid licenses but show no activity across Exchange, SharePoint, Teams, and OneDrive in the last 90 days. Review their license assignments to potentially reduce costs. Estimated savings could be significant if unused licenses are reclaimed.
14 users haven't signed in for more than 180 daysMedium
Consider disabling or removing inactive user accounts to free up licenses
Underutilized licenses: Microsoft Defender for Endpoint P2_XPLATMedium
Only 1% of licenses are assigned (1/100). Consider reducing the number of licenses.
Underutilized licenses: Microsoft 365 E5 Developer (without Windows and Audio Conferencing)Medium
Only 76% of licenses are assigned (19/25). Consider reducing the number of licenses.
Users with licenses who have NEVER used the serviceMedium
Licensed users who have never accessed: Exchange: 10; Teams: 15; SharePoint: 15; OneDrive: 15. These represent the highest priority for license review.
7 mailbox(es) haven't been used in over 90 daysMedium
Consider reviewing these mailboxes to determine if their licenses are still needed.
Overview
Tenant: TurritoInfo
Tenant ID: 8a16c8af-c194-428b-ae38-aeffc9358ce3
Licensed Users: 19Info
Total number of users with at least one license assigned
Verified Domains: 2Info
Total number of verified domains in the tenant
Exchange Mailboxes: 28Info
Total number of Exchange Online mailboxes
SharePoint Sites: 14Info
Total number of SharePoint sites
OneDrive Accounts: 19Info
Total number of OneDrive accounts
Managed Devices: 3Info
Total number of devices managed by Intune

Tenant Overview
Microsoft 365 Tenant Overview
Tenant Information
Tenant NameTurrito
Tenant ID8a16c8af-c194-428b-ae38-aeffc9358ce3
Domains2
User Statistics
Licensed Users19
Total Users31
Guest Users1
Content Services
Exchange Mailboxes28
SharePoint Sites14
OneDrive Accounts19
Microsoft Teams5
Device Management
Managed Devices3
Non-Compliant Devices3
Defender Agents3
MFA Registration Status


This chart shows the number of users with MFA registered. Users without MFA are at higher risk of account compromise.
User License Status


Total Users: 31

Licensed Users: 19

Unlicensed Users: 11

Guest Users: 1

Service Health Status

Report Documentation
Microsoft 365 Tenant Report Guide

This report provides an overview of your Microsoft 365 tenant configuration and highlights security recommendations.


Understanding This Report

This report is organized into tabs covering different aspects of your Microsoft 365 tenant:

  • Summary & Insights:
    High-level overview and key findings
  • Tenant Info:
    Basic tenant information and domain configuration
  • Entra ID:
    User identity management, MFA status, and admin roles
  • Exchange:
    Email usage, mailbox statistics, and activity
  • SharePoint:
    Site usage and storage information
  • OneDrive:
    Storage usage and sharing statistics
  • Teams:
    Team activity and usage metrics
  • Defender:
    Security score, recommendations, and compliance status

Security Score Explained

The security score is calculated based on the implementation status of security controls in your tenant. The score helps you:

  • Understand your current security posture
  • Identify areas for improvement
  • Track progress over time
  • Benchmark against similar organizations

Key Metrics and Colors

Throughout this report, we use color coding to highlight different severity levels:

  • Red:
    Critical issues requiring immediate attention
  • Orange:
    High priority issues
  • Yellow:
    Medium priority issues
  • Green:
    Low priority or informational items

Next Steps

Review the recommendations in each section and prioritize actions based on severity. Focus first on critical and high-priority items to improve your security posture.
Tenant Details
DisplayNameIdCreatedDateTimeDefaultDomainTechnicalContactsStreetCityStateCountryPostalCodeBusinessPhones
Turrito8a16c8af-c194-428b-ae38-aeffc9358ce301/31/2023 13:19:43robinm365lab.myo365.sitepieterse.robin@gmail.com427 Cork AveFerndaleGauteng2194829237694
Domains
IdIsDefaultIsInitialIsRootIsVerifiedAuthenticationTypeSupportedServicesState
robinm365lab.onmicrosoft.comFalseTrueTrueTrueManagedEmail OfficeCommunicationsOnline
robinm365lab.myo365.siteTrueFalseTrueTrueManagedEmail
robinm365lab.onmicrosoft.com Configuration
DomainNameIsDefaultIsVerifiedSPFConfiguredDKIMConfiguredDMARCConfigured
robinm365lab.onmicrosoft.comFalseTrueTrueTrueTrue
DNS Records:
RecordTypeValueStatus
SPF RecordNot ConfiguredConfigured
DKIMConfigured (record details not available)Configured
DMARC RecordNot ConfiguredConfigured

MX Records:
DomainPreferenceExchangeTTL
robinm365lab.onmicrosoft.com0robinm365lab.mail.protection.outlook.com3600
robinm365lab.myo365.site Configuration
DomainNameIsDefaultIsVerifiedSPFConfiguredDKIMConfiguredDMARCConfigured
robinm365lab.myo365.siteTrueTrueTrueFalseFalse
DNS Records:
RecordTypeValueStatus
SPF Recordv=spf1 include:spf.protection.outlook.com -allConfigured
DKIMNot ConfiguredNot Configured
DMARC RecordNot ConfiguredNot Configured

MX Records:
DomainPreferenceExchangeTTL
robinm365lab.myo365.site10robinm365lab-myo365-site.mail.protection.outlook.com3600
MFA Registration Status
Users Without MFA
UserIdDisplayNameUserPrincipalNameAccountEnabledMFARegisteredMFAMethodsRequiresAction
cdf9676a-abf2-42ff-89a0-ca5f67afbaefBill NyeBill@robinm365lab.myo365.siteTrueFalsePasswordTrue
81535a30-cdc8-458e-ba1a-03f30bf70907Henrietta MuellerHenriettaM@robinm365lab.onmicrosoft.comTrueFalsePassword, Temporary Access PassTrue
a044fe85-deea-4c4a-86a5-d8408b1cd5b5Isaiah LangerIsaiahL@robinm365lab.onmicrosoft.comTrueFalsePasswordTrue
f9fd168f-b8e5-48ec-ad52-f2912469ecfbJohanna LorenzJohannaL@robinm365lab.onmicrosoft.comTrueFalsePasswordTrue
7e1a95da-86d1-4e06-8468-dc69958b1b1eJoni ShermanJoniS@robinm365lab.onmicrosoft.comTrueFalsePasswordTrue
2fdae1e9-dadc-4beb-857b-25d886bab866Lee GuLeeG@robinm365lab.onmicrosoft.comTrueFalsePasswordTrue
f06d2737-5881-4a0a-bff9-f3b35997fc7aLidia HollowayLidiaH@robinm365lab.onmicrosoft.comTrueFalsePasswordTrue
17534b49-563f-4a3c-afab-767a488db777Lynne RobbinsLynneR@robinm365lab.onmicrosoft.comTrueFalsePasswordTrue
dd288739-ce68-4b7f-83d0-e96aa0327f95Megan BowenMeganB@robinm365lab.onmicrosoft.comTrueFalsePasswordTrue
c32d70a9-bc5f-4dde-921e-a3fa996fff17Miriam GrahamMiriamG@robinm365lab.onmicrosoft.comTrueFalsePasswordTrue
76d23cd2-a82c-4d42-8439-591080199113Nancy Drewnancyd@robinm365lab.myo365.siteTrueFalsePasswordTrue
1e6cc427-a473-4b29-b55d-977d6d7259aaNestor WilkeNestorW@robinm365lab.onmicrosoft.comTrueFalsePasswordTrue
bbaedfe3-6cc8-4cf6-aeda-631e62ccd35ePatti FernandezPattiF@robinm365lab.onmicrosoft.comTrueFalsePasswordTrue
5ca08e6a-91f3-4332-a9c0-ed074d8d570bPradeep GuptaPradeepG@robinm365lab.onmicrosoft.comTrueFalsePasswordTrue
Administrator Users
UserIdDisplayNameUserPrincipalNameRoleIdRoleDisplayNameRoleDescriptionAccountEnabledMFARegisteredMFAMethodsIsGroupBasedGroupNameAssignmentStateRequiresAction
8484af7c-b04a-4b33-8f0e-e43e78cd2b1cRobin Pieterseadmin@robinm365lab.onmicrosoft.com9c7d7d2d-c8b7-4b92-90c3-2a449ad7912fGlobal AdministratorCan manage all aspects of Microsoft Entra ID and Microsoft services that use Microsoft Entra identities.TrueTruePassword, Phone Authentication, Microsoft Authenticator, Microsoft Authenticator, FIDO2 Security KeyFalsePermanentFalse
ecfbab3c-01dc-4233-a25a-629de34d81b7Admin UserAdmin2@robinm365lab.onmicrosoft.com9c7d7d2d-c8b7-4b92-90c3-2a449ad7912fGlobal AdministratorCan manage all aspects of Microsoft Entra ID and Microsoft services that use Microsoft Entra identities.TrueTruePassword, Microsoft AuthenticatorFalsePermanentFalse
Admin Users Without MFA
All admin users have MFA registered. Great job!
Guest Users
IdDisplayNameUserPrincipalNameAccountEnabledCreatedDateTimeLastSignInDateTimeDaysSinceCreationGroupMemberships
fbe8ab9b-1161-4935-b0b0-24f9f990d7f0Example Guest Userexample_turrito.com#EXT#@robinm365lab.onmicrosoft.comTrue04/12/2024 10:52:39808
Users Inactive for 180+ Days
IdDisplayNameUserPrincipalNameAccountEnabledUserTypeCreatedDateTimeLastSignInDateTimeDaysSinceLastSignIn
ecfbab3c-01dc-4233-a25a-629de34d81b7Admin UserAdmin2@robinm365lab.onmicrosoft.comTrueMember01/31/2023 13:43:3001/31/2023 13:45:251244
cdf9676a-abf2-42ff-89a0-ca5f67afbaefBill NyeBill@robinm365lab.myo365.siteTrueMember03/31/2023 12:25:3204/12/2023 15:24:101173
81535a30-cdc8-458e-ba1a-03f30bf70907Henrietta MuellerHenriettaM@robinm365lab.onmicrosoft.comTrueMember07/02/2025 17:20:5307/03/2025 17:23:52360
a044fe85-deea-4c4a-86a5-d8408b1cd5b5Isaiah LangerIsaiahL@robinm365lab.onmicrosoft.comTrueMember07/02/2025 17:20:5407/03/2025 17:23:59360
f9fd168f-b8e5-48ec-ad52-f2912469ecfbJohanna LorenzJohannaL@robinm365lab.onmicrosoft.comTrueMember07/02/2025 17:20:5507/03/2025 17:24:06360
7e1a95da-86d1-4e06-8468-dc69958b1b1eJoni ShermanJoniS@robinm365lab.onmicrosoft.comTrueMember07/02/2025 17:20:5607/03/2025 17:24:14360
2fdae1e9-dadc-4beb-857b-25d886bab866Lee GuLeeG@robinm365lab.onmicrosoft.comTrueMember07/02/2025 17:20:4207/03/2025 17:22:43360
f06d2737-5881-4a0a-bff9-f3b35997fc7aLidia HollowayLidiaH@robinm365lab.onmicrosoft.comTrueMember07/02/2025 17:20:5707/03/2025 17:24:25360
17534b49-563f-4a3c-afab-767a488db777Lynne RobbinsLynneR@robinm365lab.onmicrosoft.comTrueMember07/02/2025 17:20:5907/03/2025 17:24:30360
dd288739-ce68-4b7f-83d0-e96aa0327f95Megan BowenMeganB@robinm365lab.onmicrosoft.comTrueMember07/02/2025 17:21:0007/03/2025 17:24:36360
c32d70a9-bc5f-4dde-921e-a3fa996fff17Miriam GrahamMiriamG@robinm365lab.onmicrosoft.comTrueMember07/02/2025 17:20:4407/03/2025 17:22:55360
1e6cc427-a473-4b29-b55d-977d6d7259aaNestor WilkeNestorW@robinm365lab.onmicrosoft.comTrueMember07/02/2025 17:20:4507/03/2025 17:23:03360
bbaedfe3-6cc8-4cf6-aeda-631e62ccd35ePatti FernandezPattiF@robinm365lab.onmicrosoft.comTrueMember07/02/2025 17:20:4107/03/2025 17:22:34360
5ca08e6a-91f3-4332-a9c0-ed074d8d570bPradeep GuptaPradeepG@robinm365lab.onmicrosoft.comTrueMember07/02/2025 17:21:0107/03/2025 17:24:41360
Conditional Access Overview
Policy Summary

  • Total Policies: 68
  • Enabled: 14
  • Report-only (not enforced): 3
  • Disabled: 51
Conditional Access Insights (2)
51 Conditional Access policies are disabledMedium
Review disabled policies to determine if they should be enabled or removed: CAD001-O365: Grant macOS access for All users when Modern Auth Clients and Compliant-v1.1, CAD002-O365: Grant Windows access for All users when Modern Auth Clients and Compliant-v1.1, CAD003-O365: Grant iOS and Android access for All users when Modern Auth Clients and AppProPol or Compliant-v1.3, CAD005-O365: Block access for unsupported device platforms for All users when Modern Auth Clients-v1.1, CAD006-O365: Session block download on unmanaged device for All users when Browser and Modern App Clients and Non-Compliant-v1.5, CAD007-O365: Session set Sign-in Frequency for Apps for All users when Modern Auth Clients and Non-Compliant-v1.2, CAD008-All: Session set Sign-in Frequency for All users when Browser and Non-Compliant-v1.1, CAD009-All: Session disable browser persistence for All users when Browser and Non-Compliant-v1.2, CAD010-RJD: Require MFA for device join or registration when Browser and Modern Auth Clients-v1.1, CAD011-O365: Grant Linux access for All users when Modern Auth Clients and Compliant-v1.0, CAD012-All: Grant access for Admin users when Browser and Modern Auth Clients and Compliant-v1.1, CAD014-O365: Require App Protection Policy for Edge on Windows for All users when Browser and Non-Compliant-v1.0, CAD015-All: Grant access for All users when Browser and Modern Auth Clients and Compliant on Windows and macOS-v1.0 , CAD017-Selected: Grant iOS and Android access for All users when Modern Auth Clients and AppProPol or Compliant-v1.1, CAL002-RSI: Require MFA registration from trusted locations only for All users when Browser and Modern Auth Clients-v1.4, CAL003-All: Block Access for Specified Service Accounts except from Provided Trusted Locations when Browser and Modern Auth Clients-v1.1, CAL004-All: Block access for Admins from non-trusted locations when Browser and Modern Auth Clients-v1.2, CAP001-All: Block Legacy Authentication for All users when OtherClients-v1.0, CAP002-All: Block Exchange ActiveSync Clients for All users-v1.1, CAP003-All: Block device code authentication flow-v1.0, CAP004-All: Block authentication transfer-v1.0, CAU001-All: Grant Require MFA for guests when Browser and Modern Auth Clients-v1.1, CAU001A-Windows Azure Active Directory: Grant Require MFA for guests when Browser and Modern Auth Clients-v1.0, CAU002-All: Grant Require MFA for All users when Browser and Modern Auth Clients-v1.5, CAU003-Selected: Block unapproved apps for guests when Browser and Modern Auth Clients-v1.0, CAU005-Selected: Session route through MDCA for All users when Browser on Compliant-v1.1, CAU006-All: Grant access for Medium and High Risk Sign-in for All Users when Browser and Modern Auth Clients require MFA-v1.4, CAU007-All: Grant access for Medium and High Risk Users for All Users when Browser and Modern Auth Clients require PWD reset-v1.3, CAU008-All: Grant Require Phishing Resistant MFA for Admins when Browser and Modern Auth Clients-v1.4, CAU009-Management: Grant Require MFA for Admin Portals for All Users when Browser and Modern Auth Clients-v1.2, CAU011-All: Block access for All users except licensed when Browser and Modern Auth Clients-v1.0, CAU012-RSI: Combined Security Info Registration with TAP-v1.1, CAU013-All: Grant Require phishing resistant MFA for All users when Browser and Modern Auth Clients-v1.0, CAU015-All: Block access for High Risk Sign-in for All Users when Browser and Modern Auth Clients-v1.0, CAU016-All: Block access for High Risk Users for All Users when Browser and Modern Auth Clients-v1.0, CAU017-All: Session set Sign-in Frequency for Admins when Browser-v1.0, CAU018-All: Session disable browser persistence for Admins when Browser-v1.0, Block access for unknown or unsupported device platform, Block access to Office365 apps for users with insider risk, Block all agent identities from accessing resources, Block all agent users from accessing resources, Block high risk agent identities from accessing resources, No persistent browser session, Require compliant or hybrid Azure AD joined device for admins, Require compliant or hybrid Azure AD joined device or multifactor authentication for all users, Require MDM-enrolled and compliant device to access cloud apps for all users (Preview), Require multifactor authentication for Azure management, Require multifactor authentication for guest access, Require multifactor authentication for Microsoft admin portals, Require phishing-resistant multifactor authentication for admins, Use application enforced restrictions for O365 apps
3 Conditional Access policies are in Report-only modeLow
Report-only policies are not enforced. Review and enable if appropriate: Phish resistant MFA for Admin Portal, GeoBlock_USA, Onboard Apps to CASB
Conditional Access Policies

Demo snapshot: 15 of 68 source rows are included. Search and CSV export cover these 15 rows.

IdDisplayNameStateCreatedDateTimeModifiedDateTimeIncludeUsersExcludeUsersIncludeGroupsExcludeGroupsIncludeRolesExcludeRolesIncludePlatformsExcludePlatformsIncludeLocationsExcludeLocationsIncludeApplicationsExcludeApplicationsClientAppTypesUserRiskLevelsSignInRiskLevelsGrantControlOperatorGrantControlsAuthenticationStrengthSessionControls
5d7bcb38-ed5f-47ba-879b-4f1c81255e6eRequire multifactor authentication for adminsEnabled01/31/2023 13:32:1501/31/2023 13:47:07Global Administrator, Security Administrator, SharePoint Administrator, Exchange Administrator, Conditional Access Administrator, Helpdesk Administrator, Billing Administrator, User Administrator, Authentication Administrator, Application Administrator, Cloud Application Administrator, Password Administrator, Privileged Authentication Administrator, Privileged Role AdministratorAll ApplicationsallRequire one of the selected controlsRequire MFA
feca53f9-ba62-43f0-acc6-0b30b5b23ecfRequire multifactor authentication for all usersEnabled01/31/2023 14:38:5407/03/2025 17:34:47All UsersRobin PieterseAll ApplicationsallRequire one of the selected controlsRequire MFA
a2b4c06b-3a7f-46fc-86ad-cce61045bed0Block legacy authenticationEnabled01/31/2023 14:40:28All UsersRobin PieterseAll ApplicationsexchangeActiveSync, otherRequire one of the selected controlsBlock access
e093d8dc-d2fd-4fd6-8d15-5f3d613f8cc3Require multifactor authentication for risky sign-insEnabled07/04/2023 10:26:3407/07/2023 07:01:44All UsersRobin PieterseAll Applicationsallhigh, mediumRequire one of the selected controlsRequire MFA
7adf45f7-197a-4059-93e5-26560bf08dc7Require password change for high-risk usersEnabled07/04/2023 10:27:2607/07/2023 07:01:52All UsersRobin PieterseAll ApplicationsallhighRequire all of the selected controlsRequire MFA, Require password change
ac08b23a-7823-47b4-88b5-457060794da6Phish resistant MFA for Admin PortalReport-only01/12/2024 08:50:19Admin UserAll Platformsandroid, iOS, macOS, linuxMicrosoftAdminPortalsallRequire all of the selected controlsRequire MFA, Require compliant device
79a39d80-febf-4985-98bb-aea112489e41Securing security info registrationEnabled07/15/2024 13:52:2009/23/2025 11:30:18All UsersRobin PieterseGlobal AdministratorAll LocationsSA LocationallRequire one of the selected controlsRequire MFA
2cd695a9-06e6-47f3-8d1c-fd9241aef799Device Compliance PolicyEnabled10/01/2025 13:50:3010/16/2025 14:32:11Adele Vance, Alex WilberAll ApplicationsallRequire all of the selected controlsRequire compliant device, Authentication Strength: Passwordless MFA w TAP OTPPasswordless MFA w TAP OTP
933cdb83-68dc-4fb4-b545-2d4b94dbe9e9GeoBlock_USAReport-only10/01/2025 14:45:2110/16/2025 13:54:49Alex WilberAll LocationsUSAOffice 365allRequire one of the selected controlsBlock access
c7f5bd93-909b-4f13-902e-e84666cf8bafBlock BYOD Downloads App PolicyEnabled10/06/2025 10:56:1910/22/2025 13:36:50BYOD UsersbrowserRequire all of the selected controlsUse Conditional Access App Control
fd9a5989-0ee7-43d9-9f01-7357dd95a866Onboard Apps to CASBReport-only10/08/2025 20:50:2810/30/2025 12:05:44Robin PieterseAll Platformsandroid, iOS, macOS, linuxAll ApplicationsallRequire all of the selected controlsUse Conditional Access App Control
a25d93b2-0f69-4e27-84e7-32d773def642Block Gsuite UploadsEnabled10/15/2025 14:09:4510/15/2025 14:16:47All UsersbrowserRequire one of the selected controlsBlock access
bc19f45c-2d07-4dfc-a76c-88fc8b518ec8MCAS GSuite RedirectEnabled10/15/2025 14:11:3610/16/2025 07:30:25All Users4d7fe9fb-5646-447f-ba61-ba9bd4455b27browserRequire all of the selected controlsUse Conditional Access App Control
ca78c8e7-1d9a-4c11-9622-8942364dcd69MCAS BYOD O365 RedirectEnabled10/16/2025 07:33:29BYOD UsersOffice 365browserRequire all of the selected controlsUse Conditional Access App Control
649ca8e3-3f08-4925-8176-5539018c7dd4Register or Join DeviceEnabled10/16/2025 12:26:32All UsersRobin PieterseallRequire one of the selected controlsRequire MFA
Authentication Methods
MethodEnabledIncludeTargetsExcludeTargetsAdditionalSettings
Email OTPYesAllow external users: Default (Microsoft managed)
Microsoft AuthenticatorYesAll usersSoftware OATH via Authenticator: Enabled; App information display: enabled; Location display: enabled
Passkey (FIDO2)YesAll users, BitWarden PasskeysSelf-service setup: Allowed; Profile [Default passkey profile] — Attestation: Registration only; Type: Device-bound; Key restrictions: allow (2 AAGUID(s)); Profile [Bitwarden] — Attestation: Disabled; Type: Synced; Key restrictions: allow (1 AAGUID(s))
SMSYesAll users
Software OATH tokensYesAll users
Temporary Access PassYesAll usersDefault length: 8 chars; One-time use only: No
Certificate-based authenticationNoAll usersDefault auth mode: x509CertificateSingleFactor; User bindings: userPrincipalName
QR codeNoAll usersQR code lifetime: 365 days; PIN length: 8 digits
VerifiableCredentialsNo
Voice callNoAll users
Authentication Strength Policies (4)
DisplayNameDescriptionPolicyTypeAuthenticationStrengthIdAllowedMethodsCombinationConfigurationsUsedByPoliciesAssignedUsersGroupsCreatedDateTimeModifiedDateTime
Passwordless MFA w TAP OTPPasswordless MFA allowing for TAP OTP for initial onboardingCustom47313da9-a00b-4809-a64b-ee22b0fc445dWindows Hello for Business; FIDO2 security key; Certificate-based auth (MFA); Microsoft Authenticator (device-bound push); Temporary Access Pass (one-time)Device Compliance PolicyAdele Vance, Alex Wilber10/16/2025 14:31:2710/16/2025 14:31:27
Multifactor authenticationCombinations of methods that satisfy strong authentication, such as a password + SMSBuilt-in00000000-0000-0000-0000-000000000002Windows Hello for Business; FIDO2 security key; Certificate-based auth (MFA); Microsoft Authenticator (device-bound push); Temporary Access Pass (one-time); Temporary Access Pass (multi-use); password,microsoftAuthenticatorPush; password,softwareOath; password,hardwareOath; password,x509CertificateSingleFactor; password,x509CertificateMultiFactor; password,sms; password,voice; Federated multi-factor; microsoftAuthenticatorPush,federatedSingleFactor; softwareOath,federatedSingleFactor; hardwareOath,federatedSingleFactor; sms,federatedSingleFactor; voice,federatedSingleFactorCAU002-All: Grant Require MFA for All users when Browser and Modern Auth Clients-v1.5, CAU009-Management: Grant Require MFA for Admin Portals for All Users when Browser and Modern Auth Clients-v1.2, Require multifactor authentication for Microsoft admin portalsAll Users12/01/2021 00:00:0012/01/2021 00:00:00
Passwordless MFAPasswordless methods that satisfy strong authentication, such as Passwordless sign-in with the Microsoft AuthenticatorBuilt-in00000000-0000-0000-0000-000000000003Windows Hello for Business; FIDO2 security key; Certificate-based auth (MFA); Microsoft Authenticator (device-bound push)12/01/2021 00:00:0012/01/2021 00:00:00
Phishing-resistant MFAPhishing-resistant, Passwordless methods for the strongest authentication, such as a FIDO2 security keyBuilt-in00000000-0000-0000-0000-000000000004Windows Hello for Business; FIDO2 security key; Certificate-based auth (MFA)CAU008-All: Grant Require Phishing Resistant MFA for Admins when Browser and Modern Auth Clients-v1.4, CAU013-All: Grant Require phishing resistant MFA for All users when Browser and Modern Auth Clients-v1.0, Require phishing-resistant multifactor authentication for adminsAAD_UA_CAU013_Include12/01/2021 00:00:0012/01/2021 00:00:00
App Registration Overview
Application Registration Summary

  • Total Applications: 8
  • Apps with High-Priority Permissions: 1
  • Apps with Expired Credentials: 1
  • Apps Never Used: 6
  • Newly Created Apps (Last 10 Days): 0
  • Apps Without Owner: 5
  • Apps with Unverified Publishers: 0
App Registration Insights (4)
1 application(s) have high privileged permissionsHigh
Review and validate these applications and their permission requirements
1 application(s) have expired or expiring credentialsHigh
Update expired passwords and certificates to prevent authentication failures
6 application(s) have never been usedMedium
Consider removing unused applications to reduce attack surface
5 application(s) have no assigned ownerMedium
Assign owners to maintain accountability for application management
Apps with High-Priority Permissions (1)
IdAppIdDisplayNameDescriptionSignInAudienceWebRedirectUrisCreatedDateTimeDaysSinceCreatedIsNewlyCreatedLastSignInDaysSinceLastSignInOwnerCountRequiredPermissionsHighPriorityPermissionsHasHighPriorityPermissionsPasswordStatusValidPasswordCountExpiredPasswordCountPasswordDetailsCertificateStatusValidCertCountExpiredCertCountCertificateDetailsPublisherDomainVerifiedPublisherIsFallbackPublicClient
0a1a07a5-5767-40a6-a1ea-d078a705ba08cf2c4437-703a-47c0-9c5f-7485c923b1c9M365 Tenant Insight ReportAzureADMyOrg03/25/2026 13:31:5395False2026-06-22 19:4860Office 365 Exchange Online - Exchange.ManageAsApp (Application); Microsoft Graph - Directory.Read.All (Application); Microsoft Graph - AuditLog.Read.All (Application); Microsoft Graph - User.Read.All (Application); Microsoft Graph - Organization.Read.All (Application); Microsoft Graph - Application.Read.All (Application); Microsoft Graph - Policy.Read.All (Application); Microsoft Graph - Reports.Read.All (Application); Microsoft Graph - Mail.Read (Application); Microsoft Graph - Device.Read.All (Application); Microsoft Graph - DeviceManagementApps.Read.All (Application); Microsoft Graph - and 15 more...Exchange.ManageAsApp, Directory.Read.All, User.Read.All, Mail.ReadTrueNone00None1 valid, 0 expired/expiring10Valid until 2028-03-25robinm365lab.myo365.site (Verified)
Apps with Expired/Expiring Credentials (1)
IdAppIdDisplayNameDescriptionSignInAudienceWebRedirectUrisCreatedDateTimeDaysSinceCreatedIsNewlyCreatedLastSignInDaysSinceLastSignInOwnerCountRequiredPermissionsHighPriorityPermissionsHasHighPriorityPermissionsPasswordStatusValidPasswordCountExpiredPasswordCountPasswordDetailsCertificateStatusValidCertCountExpiredCertCountCertificateDetailsPublisherDomainVerifiedPublisherIsFallbackPublicClient
9a9a928e-cfae-4c10-a346-de374db4de4555b3fb77-2f53-477a-b11b-4e3904771623Test ApplicationAzureADMyOrg04/12/2024 10:50:42808FalseNeverNever0Microsoft Graph - User.Read (Delegated)NoneFalse0 valid, 1 expired/expiring01EXPIRED/EXPIRING 2024-10-09None00Nonerobinm365lab.myo365.site (Verified)
Apps Never Used (6)
IdAppIdDisplayNameDescriptionSignInAudienceWebRedirectUrisCreatedDateTimeDaysSinceCreatedIsNewlyCreatedLastSignInDaysSinceLastSignInOwnerCountRequiredPermissionsHighPriorityPermissionsHasHighPriorityPermissionsPasswordStatusValidPasswordCountExpiredPasswordCountPasswordDetailsCertificateStatusValidCertCountExpiredCertCountCertificateDetailsPublisherDomainVerifiedPublisherIsFallbackPublicClient
11b74c71-0012-43f5-b3cf-8e3e120ef297ca3d1ae7-6cee-425e-9763-891e3323eb68GSA-Microsoft365trafficforwardingprofileAzureADMyOrg07/15/2024 07:05:33714FalseNeverNever1NoneNoneFalseNone00NoneNone00Nonerobinm365lab.myo365.site (Verified)
64593685-5d75-419e-8615-fd546fbd1ec679e08e36-91f6-4964-96c1-3ac40ff8d4e1GSA-InternettrafficforwardingprofileAzureADMyOrg07/15/2024 07:05:32714FalseNeverNever1NoneNoneFalseNone00NoneNone00Nonerobinm365lab.myo365.site (Verified)
9a9a928e-cfae-4c10-a346-de374db4de4555b3fb77-2f53-477a-b11b-4e3904771623Test ApplicationAzureADMyOrg04/12/2024 10:50:42808FalseNeverNever0Microsoft Graph - User.Read (Delegated)NoneFalse0 valid, 1 expired/expiring01EXPIRED/EXPIRING 2024-10-09None00Nonerobinm365lab.myo365.site (Verified)
a3799617-c798-4082-93c3-08b9af7e9bd88dc3c636-b582-44ee-bf2a-d3139e3be339ZoomAzureADMyOrghttps://*.zoom.us/saml/SSO10/01/2025 18:14:27270FalseNeverNever0NoneNoneFalseNone00NoneNone00Nonerobinm365lab.myo365.site (Verified)False
fb980bdf-ab50-4361-8a42-1eecb80e079e1d7de0ee-6a74-44a9-9c65-ede6089bb496SharePoint Online Client Extensibility Web Application PrincipalAzureADMyOrg07/01/2024 07:09:45728FalseNeverNever0NoneNoneFalse1 valid, 0 expired/expiring10Valid until 2074-06-30None00Nonerobinm365lab.myo365.site (Verified)
fe2508b1-fc79-44c6-b5c6-11a9bf260983625f5470-5ab5-4bc6-a361-807c606fb10dGSA-PrivateaccesstrafficforwardingprofileAzureADMyOrg07/15/2024 07:05:32714FalseNeverNever1NoneNoneFalseNone00NoneNone00Nonerobinm365lab.myo365.site (Verified)
All Registered Applications (8)
IdAppIdDisplayNameDescriptionSignInAudienceWebRedirectUrisCreatedDateTimeDaysSinceCreatedIsNewlyCreatedLastSignInDaysSinceLastSignInOwnerCountRequiredPermissionsHighPriorityPermissionsHasHighPriorityPermissionsPasswordStatusValidPasswordCountExpiredPasswordCountPasswordDetailsCertificateStatusValidCertCountExpiredCertCountCertificateDetailsPublisherDomainVerifiedPublisherIsFallbackPublicClient
0a1a07a5-5767-40a6-a1ea-d078a705ba08cf2c4437-703a-47c0-9c5f-7485c923b1c9M365 Tenant Insight ReportAzureADMyOrg03/25/2026 13:31:5395False2026-06-22 19:4860Office 365 Exchange Online - Exchange.ManageAsApp (Application); Microsoft Graph - Directory.Read.All (Application); Microsoft Graph - AuditLog.Read.All (Application); Microsoft Graph - User.Read.All (Application); Microsoft Graph - Organization.Read.All (Application); Microsoft Graph - Application.Read.All (Application); Microsoft Graph - Policy.Read.All (Application); Microsoft Graph - Reports.Read.All (Application); Microsoft Graph - Mail.Read (Application); Microsoft Graph - Device.Read.All (Application); Microsoft Graph - DeviceManagementApps.Read.All (Application); Microsoft Graph - and 15 more...Exchange.ManageAsApp, Directory.Read.All, User.Read.All, Mail.ReadTrueNone00None1 valid, 0 expired/expiring10Valid until 2028-03-25robinm365lab.myo365.site (Verified)
11b74c71-0012-43f5-b3cf-8e3e120ef297ca3d1ae7-6cee-425e-9763-891e3323eb68GSA-Microsoft365trafficforwardingprofileAzureADMyOrg07/15/2024 07:05:33714FalseNeverNever1NoneNoneFalseNone00NoneNone00Nonerobinm365lab.myo365.site (Verified)
207eb304-c1de-4964-acaa-f84c6ccf8357702bfd98-3092-4d70-be2b-c3e6b5ae971aP2P ServerAzureADMyOrg09/23/2025 12:30:25279False2026-05-15 05:59450NoneNoneFalseNone00NoneNone00Nonerobinm365lab.myo365.site (Verified)False
64593685-5d75-419e-8615-fd546fbd1ec679e08e36-91f6-4964-96c1-3ac40ff8d4e1GSA-InternettrafficforwardingprofileAzureADMyOrg07/15/2024 07:05:32714FalseNeverNever1NoneNoneFalseNone00NoneNone00Nonerobinm365lab.myo365.site (Verified)
9a9a928e-cfae-4c10-a346-de374db4de4555b3fb77-2f53-477a-b11b-4e3904771623Test ApplicationAzureADMyOrg04/12/2024 10:50:42808FalseNeverNever0Microsoft Graph - User.Read (Delegated)NoneFalse0 valid, 1 expired/expiring01EXPIRED/EXPIRING 2024-10-09None00Nonerobinm365lab.myo365.site (Verified)
a3799617-c798-4082-93c3-08b9af7e9bd88dc3c636-b582-44ee-bf2a-d3139e3be339ZoomAzureADMyOrghttps://*.zoom.us/saml/SSO10/01/2025 18:14:27270FalseNeverNever0NoneNoneFalseNone00NoneNone00Nonerobinm365lab.myo365.site (Verified)False
fb980bdf-ab50-4361-8a42-1eecb80e079e1d7de0ee-6a74-44a9-9c65-ede6089bb496SharePoint Online Client Extensibility Web Application PrincipalAzureADMyOrg07/01/2024 07:09:45728FalseNeverNever0NoneNoneFalse1 valid, 0 expired/expiring10Valid until 2074-06-30None00Nonerobinm365lab.myo365.site (Verified)
fe2508b1-fc79-44c6-b5c6-11a9bf260983625f5470-5ab5-4bc6-a361-807c606fb10dGSA-PrivateaccesstrafficforwardingprofileAzureADMyOrg07/15/2024 07:05:32714FalseNeverNever1NoneNoneFalseNone00NoneNone00Nonerobinm365lab.myo365.site (Verified)
Service Principals

Demo snapshot: 15 of 18 source rows are included. Search and CSV export cover these 15 rows.

IdAppIdDisplayNameServicePrincipalTypeDescriptionAccountEnabledDelegatedPermissionsAppPermissionsOwnerCreatedDateTimeAppOwnerOrganizationId
fb5d5bdb-ddc4-429c-a9be-49fd2412aaa85a2d9517-0fe6-48ea-b09c-3c5ae4a3e7dcwww.myo365.siteApplicationTrueWindows Azure Active Directory - User.ReadNoneNo owner found3c69ab9f-19ba-445c-a110-7f0e80665836
56c7e08a-e590-481a-afbd-9ccd622663aa55b3fb77-2f53-477a-b11b-4e3904771623Test ApplicationApplicationTrueMicrosoft Graph - User.ReadNoneNo owner found8a16c8af-c194-428b-ae38-aeffc9358ce3
a204a31c-d9e7-4ebb-8ba1-8b22715ee9e61d7de0ee-6a74-44a9-9c65-ede6089bb496SharePoint Online Client Extensibility Web Application PrincipalApplicationTrueNoneNoneNo owner found8a16c8af-c194-428b-ae38-aeffc9358ce3
8b0d2614-a9fe-4a51-a6e5-5228dba34194625f5470-5ab5-4bc6-a361-807c606fb10dGSA-PrivateaccesstrafficforwardingprofileApplicationTrueNoneNone0e6de7ce-b0af-4f69-a8ca-aaabac4f9aa28a16c8af-c194-428b-ae38-aeffc9358ce3
3e589171-345a-4812-870e-7d0c895da17479e08e36-91f6-4964-96c1-3ac40ff8d4e1GSA-InternettrafficforwardingprofileApplicationTrueNoneNone0e6de7ce-b0af-4f69-a8ca-aaabac4f9aa28a16c8af-c194-428b-ae38-aeffc9358ce3
43ad94f1-5bc6-4838-8a26-84731089af8dca3d1ae7-6cee-425e-9763-891e3323eb68GSA-Microsoft365trafficforwardingprofileApplicationTrueNoneNone0e6de7ce-b0af-4f69-a8ca-aaabac4f9aa28a16c8af-c194-428b-ae38-aeffc9358ce3
8b6bed08-9660-4cfd-9c39-6b06c8da7c84902f90ad-ff04-4dd6-a429-7d8daa8f86e0M365DevPortals-SamplePacks-UserExchange-ProdApplicationTrueAzure Resource Manager - user_impersonation; Microsoft Graph - ChannelMessage.Send; Microsoft Graph - Directory.AccessAsUser.All; Microsoft Graph - Directory.ReadWrite.All; Microsoft Graph - Files.ReadWrite; Microsoft Graph - IdentityRiskyUser.ReadWrite.All; Microsoft Graph - Organization.ReadWrite.All; Microsoft Graph - User.ReadWriteMicrosoft Graph - Teamwork.Migrate.All; Microsoft Graph - Mail.ReadWrite; Microsoft Graph - User.ReadWrite.All; Microsoft Graph - Application.ReadWrite.OwnedBy; Microsoft Graph - Directory.ReadWrite.All; Microsoft Graph - IdentityRiskyUser.ReadWrite.All; Microsoft Graph - Sites.ReadWrite.All; Microsoft Graph - Contacts.ReadWrite; Microsoft Graph - Group.ReadWrite.All; Microsoft Graph - Sites.Manage.AllNo owner foundcdc5aeea-15c5-4db6-b079-fcadd2505dc2
4ccaae4d-5af9-4d78-875b-1cce0c2eb54bde8bc8b5-d9f9-48b1-a8ad-b748da725064Graph ExplorerApplicationTrueMicrosoft Graph - openid; Microsoft Graph - profile; Microsoft Graph - User.Read; Microsoft Graph - offline_access; Microsoft Graph - Reports.Read.All; Microsoft Graph - IdentityProvider.Read.All; Microsoft Graph - Directory.Read.All; Microsoft Graph - Organization.Read.All; Microsoft Graph - SecurityAlert.Read.All; Microsoft Graph - SecurityIncident.Read.All; Microsoft Graph - DeviceManagementManagedDevices.Read.All; Microsoft Graph - DeviceManagementConfiguration.Read.All; Microsoft Graph - DeviceManagementConfiguration.ReadWrite.All; Microsoft Graph - DeviceManagementManagedDevices.ReadWrite.All; Microsoft Graph - DeviceManagementManagedDevices.PrivilegedOperations.All; Microsoft Graph - DeviceManagementApps.Read.All; Microsoft Graph - Policy.Read.ConditionalAccess; Microsoft Graph - Policy.ReadWrite.ConditionalAccess; Microsoft Graph - Policy.Read.All; Microsoft Graph - HealthMonitoringAlertConfig.Read.All; Microsoft Graph - CloudApp-Discovery.Read.All; Microsoft Graph - SecurityActions.Read.All; Microsoft Graph - SecurityEvents.Read.All; Microsoft Graph - Directory.AccessAsUser.All; Microsoft Graph - PrivilegedAccess.ReadWrite.AzureAD; Microsoft Graph - AuditLog.Read.All; Microsoft Graph - BitlockerKey.Read.All; Microsoft Graph - InformationProtectionPolicy.Read; Microsoft Graph - DelegatedAdminRelationship.Read.All; Microsoft Graph - openid; Microsoft Graph - profile; Microsoft Graph - offline_accessNoneNo owner foundcdc5aeea-15c5-4db6-b079-fcadd2505dc2
86b6648e-30d4-47e4-99b8-61ea0fa5792c561584e6-5270-48ec-be9c-9e8dff2a48ccIntune DiffApplicationTrueMicrosoft Graph - openid; Microsoft Graph - profile; Microsoft Graph - offline_access; Microsoft Graph - DeviceManagementConfiguration.Read.AllNoneNo owner found8d51b73f-0245-4162-ae4d-e32ad3700a04
69f234a6-701e-4264-8c24-00b235685e42702bfd98-3092-4d70-be2b-c3e6b5ae971aP2P ServerApplicationTrueNoneNoneNo owner found8a16c8af-c194-428b-ae38-aeffc9358ce3
51db32ea-7b80-4d93-9383-aeb41e21f94f8dc3c636-b582-44ee-bf2a-d3139e3be339ZoomApplicationTrueNoneNoneNo owner found8a16c8af-c194-428b-ae38-aeffc9358ce3
f4dcf1e9-42d3-4132-923f-2198eb99edb8dd19be3d-3f97-4668-9774-787523f4f6c7Zoom Social LoginApplicationTrueMicrosoft Graph - openid; Microsoft Graph - email; Microsoft Graph - profile; Microsoft Graph - User.ReadNoneNo owner founde31a6123-4833-4fde-975b-9391bded7a2e
e412d358-a307-49fd-aec9-fd03585725544d7fe9fb-5646-447f-ba61-ba9bd4455b27Google WorkspaceApplicationTrueMicrosoft Graph - openid; Microsoft Graph - email; Microsoft Graph - profileNoneNo owner found0f8cb250-b44f-4acd-b24e-2524ef9f85ac
32ae5dfe-0d88-420a-8a11-09f26fea5d8225a6a87d-1e19-4c71-9cb0-16e88ff608f1Microsoft Cloud App Security (Internal)ApplicationTrueNoneMicrosoft Rights Management Services - Content.SuperUserNo owner found33e01921-4d64-4f8c-a055-5bdaffd5e33d
a6e8101f-67bb-4346-ab88-7b3e2d52867e35e7f5d2-9978-464f-8710-c7a05d5b9fdfRead AIApplicationTrueMicrosoft Graph - Calendars.ReadWrite; Microsoft Graph - OnlineMeetings.ReadWrite; Microsoft Graph - User.Read; Microsoft Graph - email; Microsoft Graph - offline_access; Microsoft Graph - openid; Microsoft Graph - profileNoneNo owner found987f78ca-9975-4c34-b3ce-d6a8591ffa2a
Mailbox Storage Usage
Exchange Storage Trend
Mailbox Details

Demo snapshot: 15 of 28 source rows are included. Search and CSV export cover these 15 rows.

UserPrincipalNameDisplayNameStorageUsedGBQuotaGBPercentageUsedIsLowOnSpaceLastActivityDateIsDeletedCreatedDateItemCountDeletedItemCount
Admin2@robinm365lab.onmicrosoft.comAdmin User0.021000.02FalseFalse2023-01-3112690
admin@robinm365lab.onmicrosoft.comRobin Pieterse0.031000.03False2026-05-12False2023-01-3155200
cannonfodder3@robinm365lab.myo365.siteCannon Fodder3 - This time it's serious0500FalseFalse2026-05-121630
Bill@robinm365lab.myo365.siteBill Nye0500FalseFalse2023-03-316880
cannonfodder@robinm365lab.myo365.siteCannon Fodder0500FalseFalse2026-05-121350
Bob@robinm365lab.myo365.siteBob Builder0500FalseFalse2023-03-313070
creditors@robinm365lab.myo365.sitecreditors0500FalseFalse2026-03-04440
cannonfodder4@robinm365lab.myo365.siteCannon Fodder4 - Now it's personal0500FalseFalse2026-05-121600
dmarcreports@robinm365lab.myo365.siteDMARC Reports0500FalseFalse2026-03-04400
info@robinm365lab.myo365.siteInfo0500FalseFalse2026-03-041320
cannonfodder2@robinm365lab.myo365.siteCannon Fodder - The Sequel0500FalseFalse2026-05-121380
AlexW@robinm365lab.onmicrosoft.comAlex Wilber01000False2025-07-03False2025-07-0260700
MeganB@robinm365lab.onmicrosoft.comMegan Bowen01000FalseFalse2025-07-024560
PradeepG@robinm365lab.onmicrosoft.comPradeep Gupta01000FalseFalse2025-07-024450
PattiF@robinm365lab.onmicrosoft.comPatti Fernandez01000False2025-07-03False2025-07-024500
Low Storage Mailboxes
No mailboxes are low on storage space.
Email Activity Stats

Demo snapshot: 15 of 21 source rows are included. Search and CSV export cover these 15 rows.

Report Refresh DateUser Principal NameDisplay NameIs DeletedDeleted DateLast Activity DateSend CountReceive CountRead CountMeeting Created CountMeeting Interacted CountAssigned ProductsReport Period
2026-06-27MeganB@robinm365lab.onmicrosoft.comMegan BowenFalse00000MICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)30
2026-06-27MiriamG@robinm365lab.onmicrosoft.comMiriam GrahamFalse2025-07-0300000MICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)30
2026-06-27AdeleV@robinm365lab.onmicrosoft.comAdele VanceFalse2026-05-1300000MICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)+MICROSOFT DEFENDER FOR ENDPOINT P230
2026-06-27DiegoS@robinm365lab.onmicrosoft.comDiego SicilianiFalse2025-10-2200000MICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)30
2026-06-27NestorW@robinm365lab.onmicrosoft.comNestor WilkeFalse2025-07-0300000MICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)30
2026-06-27LidiaH@robinm365lab.onmicrosoft.comLidia HollowayFalse00000MICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)30
2026-06-27HenriettaM@robinm365lab.onmicrosoft.comHenrietta MuellerFalse00000MICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)30
2026-06-27GradyA@robinm365lab.onmicrosoft.comGrady ArchieFalse00000MICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)30
2026-06-27admin@robinm365lab.onmicrosoft.comRobin PieterseFalse2026-05-1204000MICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)+MICROSOFT POWER AUTOMATE FREE30
2026-06-27IsaiahL@robinm365lab.onmicrosoft.comIsaiah LangerFalse2025-07-0300000MICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)30
2026-06-27PattiF@robinm365lab.onmicrosoft.comPatti FernandezFalse2025-07-0300000MICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)30
2026-06-27JoniS@robinm365lab.onmicrosoft.comJoni ShermanFalse00000MICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)30
2026-06-27nancyd@robinm365lab.myo365.siteNancy DrewFalse00000MICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)30
2026-06-27PradeepG@robinm365lab.onmicrosoft.comPradeep GuptaFalse00000MICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)30
2026-06-27Admin2@robinm365lab.onmicrosoft.comAdmin UserFalse04000MICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)30
Mailbox & Groups Insights (2)
3 shared mailbox(es) haven't been accessed in 90+ daysMedium
Consider reviewing these shared mailboxes to determine if they're still needed.
1 shared mailbox(es) have sign-in enabledHigh
Shared mailboxes should not allow direct sign-in for security reasons. Disable account sign-in and access via delegates only.
Exchange Objects Summary
Exchange Online Object Counts
  • Shared Mailboxes: 9
  • Room Mailboxes: 1
  • Equipment Mailboxes: 1
  • Distribution Groups: 0
  • Security Groups: 0
  • Microsoft 365 Groups: 7
  • Dynamic Groups: 0
  • Public Folders: 0
  • Archive Mailboxes: 0
Shared Mailboxes (9)
DisplayNamePrimarySmtpAddressAliasRecipientTypeDetailsWhenCreatedLastLogonTimeTotalItemSizeMBItemCountProhibitSendQuotaGBHiddenFromAddressListsEnabledIsLicensedSignInAllowedForwardingAddressForwardingSmtpAddressFullAccessDelegatesSendAsDelegatesSendOnBehalfDelegates
Bob BuilderBob@robinm365lab.myo365.siteBobSharedMailbox03/31/2023 14:25:030.710UnlimitedFalseNoNoAdeleV@robinm365lab.onmicrosoft.comAdeleV@robinm365lab.onmicrosoft.comNone
Bill NyeBill@robinm365lab.myo365.siteBillSharedMailbox03/31/2023 14:26:0005/12/2026 10:56:143.27200UnlimitedFalseNoYesDiegoS@robinm365lab.onmicrosoft.comDiegoS@robinm365lab.onmicrosoft.comNone
DMARC Reportsdmarcreports@robinm365lab.myo365.sitedmarcreportsSharedMailbox03/04/2026 07:52:570.012UnlimitedFalseNoNoadmin@robinm365lab.onmicrosoft.comadmin@robinm365lab.onmicrosoft.comNone
Infoinfo@robinm365lab.myo365.siteinfoSharedMailbox03/04/2026 07:53:4705/13/2026 13:57:100.4443UnlimitedFalseNoNoAdeleV@robinm365lab.onmicrosoft.comAdeleV@robinm365lab.onmicrosoft.comNone
creditorscreditors@robinm365lab.myo365.sitecreditorsSharedMailbox03/04/2026 07:54:570.012UnlimitedFalseNoNoPradeepG@robinm365lab.onmicrosoft.comPradeepG@robinm365lab.onmicrosoft.comNone
Cannon Foddercannonfodder@robinm365lab.myo365.sitecannonfodderSharedMailbox05/12/2026 11:10:1505/12/2026 11:22:280.4547UnlimitedFalseNoNoAdeleV@robinm365lab.onmicrosoft.comAdeleV@robinm365lab.onmicrosoft.comNone
Cannon Fodder - The Sequelcannonfodder2@robinm365lab.myo365.sitecannonfodder2SharedMailbox05/12/2026 11:34:3405/12/2026 11:56:490.4546UnlimitedFalseNoNoAdeleV@robinm365lab.onmicrosoft.comAdeleV@robinm365lab.onmicrosoft.comNone
Cannon Fodder3 - This time it's seriouscannonfodder3@robinm365lab.myo365.sitecannonfodder3SharedMailbox05/12/2026 12:22:1905/12/2026 12:31:140.852UnlimitedFalseNoNoAdeleV@robinm365lab.onmicrosoft.comAdeleV@robinm365lab.onmicrosoft.comNone
Cannon Fodder4 - Now it's personalcannonfodder4@robinm365lab.myo365.sitecannonfodder4SharedMailbox05/12/2026 12:53:1905/12/2026 13:12:170.853UnlimitedFalseNoNoAdeleV@robinm365lab.onmicrosoft.comAdeleV@robinm365lab.onmicrosoft.comNone
Room Mailboxes (1)
DisplayNamePrimarySmtpAddressAliasRecipientTypeDetailsWhenCreatedLastLogonTimeTotalItemSizeMBItemCountAutomateProcessingBookingPolicyAllBookInPolicyResourceDelegatesOfficePhoneCityCountryOrRegion
BoardroomBoardroom@robinm365lab.myo365.siteBoardroomRoomMailbox03/04/2026 07:55:520.022AutoAcceptTrueNoneHead Office
Equipment Mailboxes (1)
DisplayNamePrimarySmtpAddressAliasRecipientTypeDetailsWhenCreatedLastLogonTimeTotalItemSizeMBItemCountAutomateProcessingBookingPolicyResourceDelegatesOfficePhone
ProjectorProjector@robinm365lab.myo365.siteProjectorEquipmentMailbox03/04/2026 07:59:340.012AutoAcceptNone
Microsoft 365 Groups (7)
DisplayNamePrimarySmtpAddressAliasGroupTypeWhenCreatedMemberCountOwnerCountAccessTypeLanguageClassificationHiddenFromAddressListsEnabledHiddenFromExchangeClientsEnabledRequireSenderAuthenticationEnabledSubscriptionEnabledAutoSubscribeNewMembersSharePointSiteUrlSharePointDocumentsUrl
TurritoTurrito@robinm365lab.onmicrosoft.comTurritoOffice 365 Group01/31/2023 15:21:33192Publicen-USTrueTrueTrueTrueFalse
Lab_NotificationsLab_Notifications@robinm365lab.onmicrosoft.comLab_NotificationsOffice 365 Group01/31/2023 22:02:1811Privateen-USFalseFalseTrueTrueFalsehttps://robinm365lab.sharepoint.com/sites/Lab_Notificationshttps://robinm365lab.sharepoint.com/sites/Lab_Notifications/Shared Documents
EXCOexo@robinm365lab.myo365.siteexoOffice 365 Group07/04/2023 08:03:0201Privateen-USFalseFalseTrueTrueFalsehttps://robinm365lab.sharepoint.com/sites/exohttps://robinm365lab.sharepoint.com/sites/exo/Shared Documents
Designdesign@robinm365lab.myo365.sitedesignOffice 365 Group07/04/2023 08:05:5711Privateen-USFalseFalseTrueTrueFalsehttps://robinm365lab.sharepoint.com/sites/designhttps://robinm365lab.sharepoint.com/sites/design/Shared Documents
Financefinance@robinm365lab.myo365.sitefinanceOffice 365 Group07/04/2023 08:42:2611Privateen-USFalseFalseTrueTrueFalsehttps://robinm365lab.sharepoint.com/sites/financehttps://robinm365lab.sharepoint.com/sites/finance/Shared Documents
All Companyallcompany@robinm365lab.myo365.siteallcompanyOffice 365 Group07/01/2024 09:09:1911Publicen-USFalseFalseTrueFalseFalse
ProjectXProjectX@robinm365lab.myo365.siteProjectXOffice 365 Group10/20/2025 10:38:4941Privateen-USFalseFalseTrueTrueFalsehttps://robinm365lab.sharepoint.com/sites/ProjectXhttps://robinm365lab.sharepoint.com/sites/ProjectX/Shared Documents
Archive Mailboxes Overview
Archive Mailbox Summary
  • Total Archive Mailboxes: 0
  • Total Archive Storage: 0 GB
  • Auto-Expanding Archives: 0
  • Standard Archives: 0
  • Unused Archives: 0
  • Near Quota Archives: 0
Top SharePoint Sites by Storage
No SharePoint site storage data available.
SharePoint Storage Trend
Site Details
Report Refresh DateSite IdSite URLOwner Display NameIs DeletedLast Activity DateFile CountActive File CountPage View CountVisited Page CountStorage Used (Byte)Storage Allocated (Byte)Root Web TemplateOwner Principal NameReport PeriodStorage Used (GB)Storage Allocated (GB)Storage Used %
2026-06-270468fee8-38e3-497a-9c1d-6ac055600498EXCO OwnersFalse2000155735627487790694400Groupexo@robinm365lab.myo365.site300256000
2026-06-27585a5b1f-81f6-4b66-898a-2a77f3388ad4ProjectX OwnersFalse2025-10-303000198462227487790694400GroupProjectX@robinm365lab.onmicrosoft.com300256000
2026-06-277c9e977d-3521-4b5d-a15e-dc0a630bf9deAll Company OwnersFalse2025-10-307000161560527487790694400Groupallcompany@robinm365lab.onmicrosoft.com300256000
2026-06-277da68b1b-a74a-4b0f-a56b-d8eef2db0e8cDesign OwnersFalse2025-10-157000178330827487790694400Groupdesign@robinm365lab.onmicrosoft.com300256000
2026-06-27b495f494-8e4f-48f7-9f18-437423b08c63Finance OwnersFalse2025-10-095000162367127487790694400Groupfinance@robinm365lab.onmicrosoft.com300256000
2026-06-27b9afc7f6-15c9-4d7a-96dd-64613ecae9b8Lab_Notifications OwnersFalse2023-04-174000159003927487790694400GroupLab_Notifications@robinm365lab.onmicrosoft.com300256000
2026-06-2707c34d0b-79fc-46fc-98ec-0f047c4a8023Global AdministratorFalse2025-10-202000412951527487790694400Tenant Admin Site300256000
2026-06-270850c9c3-e782-4aaf-ba7b-5c70ec908b9aGlobal AdministratorFalse0000157639327487790694400Basic Search Center300256000
2026-06-270e1e7cb4-33dd-4f84-9a8a-fb154b53da97Global AdministratorFalse2025-10-227000159691327487790694400Site Page Publishing300256000
2026-06-27168ee6d4-66b6-49cf-8c17-e7829cdb77ecNT Service\sptimerv4False2000104448127487790694400SharePoint Online Tenant Fundamental Site300256000
2026-06-27945188c8-6f36-4f94-9095-e9d62c42c16bGlobal AdministratorFalse2025-10-303000188992327487790694400App Catalog Site300256000
2026-06-27a1533b1b-2c90-4330-ad7f-b736eef3a57dGlobal AdministratorFalse500022632027487790694400Compliance Policy Center300256000
2026-06-27fa11d8b4-e508-4aab-a693-2a28e7384b54Global AdministratorFalse2023-07-049000184614127487790694400My Site Host300256000
2026-06-27dde393a8-2715-44e5-b12f-d8531c1b5347Global AdministratorFalse0000159034827487790694400Team Site300256000
SharePoint Activity

Demo snapshot: 15 of 21 source rows are included. Search and CSV export cover these 15 rows.

Report Refresh DateUser Principal NameIs DeletedDeleted DateLast Activity DateViewed Or Edited File CountSynced File CountShared Internally File CountShared Externally File CountVisited Page CountAssigned ProductsReport Period
2026-06-27MeganB@robinm365lab.onmicrosoft.comFalse00000MICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)30
2026-06-27MiriamG@robinm365lab.onmicrosoft.comFalse00000MICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)30
2026-06-27AdeleV@robinm365lab.onmicrosoft.comFalse2025-10-3000000MICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)+MICROSOFT DEFENDER FOR ENDPOINT P230
2026-06-27DiegoS@robinm365lab.onmicrosoft.comFalse2025-10-3000000MICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)30
2026-06-27NestorW@robinm365lab.onmicrosoft.comFalse00000MICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)30
2026-06-27LidiaH@robinm365lab.onmicrosoft.comFalse00000MICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)30
2026-06-27HenriettaM@robinm365lab.onmicrosoft.comFalse00000MICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)30
2026-06-27GradyA@robinm365lab.onmicrosoft.comFalse00000MICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)30
2026-06-27admin@robinm365lab.onmicrosoft.comFalse2025-10-3000000MICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)+MICROSOFT POWER AUTOMATE FREE30
2026-06-27IsaiahL@robinm365lab.onmicrosoft.comFalse00000MICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)30
2026-06-27PattiF@robinm365lab.onmicrosoft.comFalse00000MICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)30
2026-06-27JoniS@robinm365lab.onmicrosoft.comFalse00000MICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)30
2026-06-27nancyd@robinm365lab.myo365.siteFalse00000MICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)30
2026-06-27PradeepG@robinm365lab.onmicrosoft.comFalse00000MICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)30
2026-06-27Admin2@robinm365lab.onmicrosoft.comFalse00000MICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)30
Top OneDrive Storage Usage

This chart shows the OneDrive accounts with the highest storage usage in gigabytes (GB).
OneDrive Storage Trend
Low Storage OneDrive Accounts
No OneDrive accounts are low on storage space.
Account Details

Demo snapshot: 15 of 19 source rows are included. Search and CSV export cover these 15 rows.

Report Refresh DateSite IdSite URLOwner Display NameIs DeletedLast Activity DateFile CountActive File CountStorage Used (Byte)Storage Allocated (Byte)Owner Principal NameReport PeriodStorage Used (GB)Storage Allocated (GB)Storage Used %
2026-06-273bf597f8-576b-4c16-b70e-44e1c789e30bRobin PieterseFalse2025-10-088021854301099511627776admin@robinm365lab.onmicrosoft.com30010240
2026-06-2758c72358-7613-4a74-aa68-0d32f2a006d1Admin UserFalse0017360471099511627776Admin2@robinm365lab.onmicrosoft.com30010240
2026-06-279a512c8b-78ff-46cc-b51f-a2294b453c2aBill NyeFalse0017224731099511627776Bill@robinm365lab.myo365.site30010240
2026-06-27dcb66b39-72f9-44a1-a2cc-98a713120abcDiego SicilianiFalse2025-10-17204919531099511627776DiegoS@robinm365lab.onmicrosoft.com30010240
2026-06-279e053bb5-ef08-4ca6-97fc-d45e8fa71fafAlex WilberFalse2026-03-03003210651099511627776AlexW@robinm365lab.onmicrosoft.com30010240
2026-06-27f422501e-7a4c-4674-a7fa-0aa94cf2a127Adele VanceFalse002088411099511627776AdeleV@robinm365lab.onmicrosoft.com30010240
2026-06-27da6ec4c2-5a38-4b83-b939-1fe29ea25af5Grady ArchieFalse001291331099511627776GradyA@robinm365lab.onmicrosoft.com30010240
2026-06-27ec4ef7e9-99be-4d01-9999-3bcdc8d5ced6Henrietta MuellerFalse001269271099511627776HenriettaM@robinm365lab.onmicrosoft.com30010240
2026-06-275e4d0cd4-bde4-4d9a-8eee-36313c2921c6Johanna LorenzFalse001269081099511627776JohannaL@robinm365lab.onmicrosoft.com30010240
2026-06-27c503133d-6f62-412d-9a73-50b305132b0fPatti FernandezFalse001269041099511627776PattiF@robinm365lab.onmicrosoft.com30010240
2026-06-27642fb1cb-5c0b-43d6-8144-873b4c908e4dLidia HollowayFalse001269011099511627776LidiaH@robinm365lab.onmicrosoft.com30010240
2026-06-27d623167b-c14c-44bc-953b-cbb16da01fddMiriam GrahamFalse001269011099511627776MiriamG@robinm365lab.onmicrosoft.com30010240
2026-06-27a849a5ce-8e70-4b91-b5d8-dfa913b88a2fPradeep GuptaFalse001268981099511627776PradeepG@robinm365lab.onmicrosoft.com30010240
2026-06-2738f5ea44-26e8-4fe5-95d8-e7503e7483a3Megan BowenFalse001268931099511627776MeganB@robinm365lab.onmicrosoft.com30010240
2026-06-2734bcde3c-8fa5-467b-af50-cede94c92c3eNestor WilkeFalse001268821099511627776NestorW@robinm365lab.onmicrosoft.com30010240
OneDrive Activity

Demo snapshot: 15 of 21 source rows are included. Search and CSV export cover these 15 rows.

Report Refresh DateUser Principal NameIs DeletedDeleted DateLast Activity DateViewed Or Edited File CountSynced File CountShared Internally File CountShared Externally File CountAssigned ProductsReport Period
2026-06-27MeganB@robinm365lab.onmicrosoft.comFalse0000MICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)30
2026-06-27MiriamG@robinm365lab.onmicrosoft.comFalse0000MICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)30
2026-06-27AdeleV@robinm365lab.onmicrosoft.comFalse0000MICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)+MICROSOFT DEFENDER FOR ENDPOINT P230
2026-06-27DiegoS@robinm365lab.onmicrosoft.comFalse2025-10-170000MICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)30
2026-06-27NestorW@robinm365lab.onmicrosoft.comFalse0000MICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)30
2026-06-27LidiaH@robinm365lab.onmicrosoft.comFalse0000MICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)30
2026-06-27HenriettaM@robinm365lab.onmicrosoft.comFalse0000MICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)30
2026-06-27GradyA@robinm365lab.onmicrosoft.comFalse0000MICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)30
2026-06-27admin@robinm365lab.onmicrosoft.comFalse2025-10-080000MICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)+MICROSOFT POWER AUTOMATE FREE30
2026-06-27IsaiahL@robinm365lab.onmicrosoft.comFalse0000MICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)30
2026-06-27PattiF@robinm365lab.onmicrosoft.comFalse0000MICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)30
2026-06-27JoniS@robinm365lab.onmicrosoft.comFalse0000MICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)30
2026-06-27nancyd@robinm365lab.myo365.siteFalse0000MICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)30
2026-06-27PradeepG@robinm365lab.onmicrosoft.comFalse0000MICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)30
2026-06-27Admin2@robinm365lab.onmicrosoft.comFalse0000MICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)30
Teams Usage Summary
Teams Activity Summary

A team is considered active if it has activity in the last 90 days.

Total Teams:
5

Active Teams:
0 (0%)

Inactive Teams:
5

Team Activity Distribution

Inactive Teams (No Activity in 90+ Days)
TeamNameLast ActivityDaysSinceLastActivityTeamType
EXCONeverPrivate
FinanceNeverPrivate
DesignNeverPrivate
Lab_Notifications2023-04-041183Private
Turrito2025-10-06267Public
Team Activity Details
Report Refresh DateTeam IdTeam NameLast Activity DateTeam TypeIs DeletedReport PeriodActive UsersActive ChannelsChannel MessagesReactionsMeetings OrganizedPost MessagesReply MessagesUrgent MessagesMentionsGuestsActive Shared ChannelsActive External UsersStatusActivity LevelTotal Activity
2026-06-26150ad1d2-284c-4428-b36d-8ba60a0f5131EXCOPrivateFalse30000000000000InactiveLow0
2026-06-2622643fd6-4cf9-4065-9469-3f96f98b8bf4FinancePrivateFalse30000000000000InactiveLow0
2026-06-268d6a1816-e705-4967-8477-d95d9127bca3DesignPrivateFalse30000000000000InactiveLow0
2026-06-269190e1aa-80d0-47d4-9c2d-6d914f8bb43aLab_Notifications2023-04-04PrivateFalse30000000000000InactiveLow0
2026-06-26e80dfefe-14ab-4327-967d-b2b01efd3106Turrito2025-10-06PublicFalse30000000000000InactiveLow0
User Activity Details

Demo snapshot: 15 of 21 source rows are included. Search and CSV export cover these 15 rows.

UserEmailLast ActivityIs LicensedTeam Chat MessagesPrivate Chat MessagesMeetingsCallsTotal ActivityStatus
Bob@robinm365lab.myo365.siteTrue00000Inactive
LynneR@robinm365lab.onmicrosoft.comTrue00000Inactive
Bill@robinm365lab.myo365.siteTrue00000Inactive
MeganB@robinm365lab.onmicrosoft.comTrue00000Inactive
JoniS@robinm365lab.onmicrosoft.comTrue00000Inactive
PattiF@robinm365lab.onmicrosoft.comTrue00000Inactive
NestorW@robinm365lab.onmicrosoft.comTrue00000Inactive
Admin2@robinm365lab.onmicrosoft.comTrue00000Inactive
AdeleV@robinm365lab.onmicrosoft.comTrue00000Inactive
JohannaL@robinm365lab.onmicrosoft.comTrue00000Inactive
IsaiahL@robinm365lab.onmicrosoft.comTrue00000Inactive
LidiaH@robinm365lab.onmicrosoft.comTrue00000Inactive
PradeepG@robinm365lab.onmicrosoft.comTrue00000Inactive
admin@robinm365lab.onmicrosoft.com2025-10-08True00000Inactive
LeeG@robinm365lab.onmicrosoft.comTrue00000Inactive
Teams Device Usage
Mobile vs Desktop Usage
Platform Breakdown
Device Usage Details
PlatformUsersPercentage of Total
Windows00%
Mac00%
Web00%
iOS00%
Android00%
User Device Usage Details

Demo snapshot: 15 of 21 source rows are included. Search and CSV export cover these 15 rows.

UserEmailWindowsMacWeb AppiOSAndroidStatus
MeganB@robinm365lab.onmicrosoft.comFalseFalseFalseFalseFalseActive
MiriamG@robinm365lab.onmicrosoft.comFalseFalseFalseFalseFalseActive
AdeleV@robinm365lab.onmicrosoft.comFalseFalseFalseFalseFalseActive
DiegoS@robinm365lab.onmicrosoft.comFalseFalseFalseFalseFalseActive
NestorW@robinm365lab.onmicrosoft.comFalseFalseFalseFalseFalseActive
LidiaH@robinm365lab.onmicrosoft.comFalseFalseFalseFalseFalseActive
HenriettaM@robinm365lab.onmicrosoft.comFalseFalseFalseFalseFalseActive
GradyA@robinm365lab.onmicrosoft.comFalseFalseFalseFalseFalseActive
admin@robinm365lab.onmicrosoft.comFalseFalseFalseFalseFalseActive
IsaiahL@robinm365lab.onmicrosoft.comFalseFalseFalseFalseFalseActive
PattiF@robinm365lab.onmicrosoft.comFalseFalseFalseFalseFalseActive
JoniS@robinm365lab.onmicrosoft.comFalseFalseFalseFalseFalseActive
nancyd@robinm365lab.myo365.siteFalseFalseFalseFalseFalseActive
PradeepG@robinm365lab.onmicrosoft.comFalseFalseFalseFalseFalseActive
Admin2@robinm365lab.onmicrosoft.comFalseFalseFalseFalseFalseActive
Teams Voice Configuration Overview
Voice Configuration Summary

Users with Phone Numbers:
0

Call Queues:
0

Auto Attendants:
0

Direct Routing Gateways:
0

Voice Routes:
1

Phone Number Type Distribution
No chart data available.
Direct Routing - Voice Routes
Route NameNumber PatternPriorityPSTN GatewaysGateway CountPSTN Usages
LocalRoute^(\+1[0-9]{10})$0None0None
Voice Routing Policies
Policy NamePSTN UsagesUsage CountRoute Type
GlobalNone0BYOT
License Summary
License Distribution by Type


This chart shows the total number of licenses purchased for each license type.
License Usage Efficiency


This chart shows usage percentage for each license type. High percentages (>90%) indicate you may need to purchase additional licenses soon.
License Summary:
  • Total Licenses:
    125
  • Used Licenses:
    20
  • Unused Licenses:
    105
  • Overall Usage:
    16%
License Details
DisplayNameServicePlanNameSkuPartNumberTotalLicensesAssignedLicensesUsedLicensesAvailableLicensesUsagePercentageIsFreeLicense
Microsoft Defender for Endpoint P2_XPLATMicrosoft Defender for Endpoint P2_XPLATMDATP_XPLAT10011991False
Microsoft 365 E5 Developer (without Windows and Audio Conferencing)Microsoft 365 E5 Developer (without Windows and Audio Conferencing)DEVELOPERPACK_E5251919676False
Unassigned Licenses
DisplayNameServicePlanNameSkuPartNumberAvailableLicensesTotalLicensesUsagePercentageIsFreeLicense
Microsoft Defender for Endpoint P2_XPLATMicrosoft Defender for Endpoint P2_XPLATMDATP_XPLAT991001False
Microsoft 365 E5 Developer (without Windows and Audio Conferencing)Microsoft 365 E5 Developer (without Windows and Audio Conferencing)DEVELOPERPACK_E562576False
Licensed User Details

Demo snapshot: 15 of 19 source rows are included. Search and CSV export cover these 15 rows.

UserIdDisplayNameUserPrincipalNameAccountEnabledAssignedLicensesLicenseCount
17534b49-563f-4a3c-afab-767a488db777Lynne RobbinsLynneR@robinm365lab.onmicrosoft.comTrueMicrosoft 365 E5 Developer (without Windows and Audio Conferencing)1
1e6cc427-a473-4b29-b55d-977d6d7259aaNestor WilkeNestorW@robinm365lab.onmicrosoft.comTrueMicrosoft 365 E5 Developer (without Windows and Audio Conferencing)1
2fdae1e9-dadc-4beb-857b-25d886bab866Lee GuLeeG@robinm365lab.onmicrosoft.comTrueMicrosoft 365 E5 Developer (without Windows and Audio Conferencing)1
3e357ab3-0994-4227-8c86-d0d4b939288cGrady ArchieGradyA@robinm365lab.onmicrosoft.comTrueMicrosoft 365 E5 Developer (without Windows and Audio Conferencing)1
5ca08e6a-91f3-4332-a9c0-ed074d8d570bPradeep GuptaPradeepG@robinm365lab.onmicrosoft.comTrueMicrosoft 365 E5 Developer (without Windows and Audio Conferencing)1
6230834d-4d5c-4c28-bfe2-1674fdc9e7beAdele VanceAdeleV@robinm365lab.onmicrosoft.comTrueMicrosoft Defender for Endpoint P2_XPLAT, Microsoft 365 E5 Developer (without Windows and Audio Conferencing)2
76d23cd2-a82c-4d42-8439-591080199113Nancy Drewnancyd@robinm365lab.myo365.siteTrueMicrosoft 365 E5 Developer (without Windows and Audio Conferencing)1
7e1a95da-86d1-4e06-8468-dc69958b1b1eJoni ShermanJoniS@robinm365lab.onmicrosoft.comTrueMicrosoft 365 E5 Developer (without Windows and Audio Conferencing)1
81535a30-cdc8-458e-ba1a-03f30bf70907Henrietta MuellerHenriettaM@robinm365lab.onmicrosoft.comTrueMicrosoft 365 E5 Developer (without Windows and Audio Conferencing)1
8484af7c-b04a-4b33-8f0e-e43e78cd2b1cRobin Pieterseadmin@robinm365lab.onmicrosoft.comTrueMicrosoft Power Automate Free, Microsoft 365 E5 Developer (without Windows and Audio Conferencing)2
8b7b7f0d-4bd8-4e20-bbde-610e23992bdfDiego SicilianiDiegoS@robinm365lab.onmicrosoft.comTrueMicrosoft 365 E5 Developer (without Windows and Audio Conferencing)1
a044fe85-deea-4c4a-86a5-d8408b1cd5b5Isaiah LangerIsaiahL@robinm365lab.onmicrosoft.comTrueMicrosoft 365 E5 Developer (without Windows and Audio Conferencing)1
bbaedfe3-6cc8-4cf6-aeda-631e62ccd35ePatti FernandezPattiF@robinm365lab.onmicrosoft.comTrueMicrosoft 365 E5 Developer (without Windows and Audio Conferencing)1
c32d70a9-bc5f-4dde-921e-a3fa996fff17Miriam GrahamMiriamG@robinm365lab.onmicrosoft.comTrueMicrosoft 365 E5 Developer (without Windows and Audio Conferencing)1
c62ffd29-0c0c-40f9-b043-53153ae934ebAlex WilberAlexW@robinm365lab.onmicrosoft.comTrueMicrosoft 365 E5 Developer (without Windows and Audio Conferencing)1
Inactive Licensed Users - License Review Recommendations

Demo snapshot: 15 of 17 source rows are included. Search and CSV export cover these 15 rows.

Display NameUser Principal NameAssigned ProductsExchange LicensedExchange Last ActivitySharePoint LicensedSharePoint Last ActivityTeams LicensedTeams Last ActivityOneDrive LicensedOneDrive Last ActivityRecommendation
Megan BowenMeganB@robinm365lab.onmicrosoft.comMICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)YesNeverYesNeverYesNeverYesNeverReview license requirements - no activity in last 90 days
Miriam GrahamMiriamG@robinm365lab.onmicrosoft.comMICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)Yes2025-07-03YesNeverYesNeverYesNeverReview license requirements - no activity in last 90 days
Diego SicilianiDiegoS@robinm365lab.onmicrosoft.comMICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)Yes2025-10-22Yes2025-10-30Yes2025-10-08Yes2025-10-17Review license requirements - no activity in last 90 days
Nestor WilkeNestorW@robinm365lab.onmicrosoft.comMICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)Yes2025-07-03YesNeverYesNeverYesNeverReview license requirements - no activity in last 90 days
Lidia HollowayLidiaH@robinm365lab.onmicrosoft.comMICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)YesNeverYesNeverYesNeverYesNeverReview license requirements - no activity in last 90 days
Henrietta MuellerHenriettaM@robinm365lab.onmicrosoft.comMICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)YesNeverYesNeverYesNeverYesNeverReview license requirements - no activity in last 90 days
Grady ArchieGradyA@robinm365lab.onmicrosoft.comMICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)YesNeverYesNeverYesNeverYesNeverReview license requirements - no activity in last 90 days
Isaiah LangerIsaiahL@robinm365lab.onmicrosoft.comMICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)Yes2025-07-03YesNeverYesNeverYesNeverReview license requirements - no activity in last 90 days
Patti FernandezPattiF@robinm365lab.onmicrosoft.comMICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)Yes2025-07-03YesNeverYesNeverYesNeverReview license requirements - no activity in last 90 days
Joni ShermanJoniS@robinm365lab.onmicrosoft.comMICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)YesNeverYesNeverYesNeverYesNeverReview license requirements - no activity in last 90 days
Nancy Drewnancyd@robinm365lab.myo365.siteMICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)YesNeverYesNeverYesNeverYesNeverReview license requirements - no activity in last 90 days
Pradeep GuptaPradeepG@robinm365lab.onmicrosoft.comMICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)YesNeverYesNeverYesNeverYesNeverReview license requirements - no activity in last 90 days
Admin UserAdmin2@robinm365lab.onmicrosoft.comMICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)YesNeverYesNeverYesNeverYesNeverReview license requirements - no activity in last 90 days
Lynne RobbinsLynneR@robinm365lab.onmicrosoft.comMICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)YesNeverYesNeverYesNeverYesNeverReview license requirements - no activity in last 90 days
Alex WilberAlexW@robinm365lab.onmicrosoft.comMICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)Yes2025-07-03Yes2025-10-23Yes2025-10-30Yes2026-03-03Review license requirements - no activity in last 90 days
Microsoft Secure Score Overview
Assessment:
Your organization has a good security posture. Maintain and continue improving with the remaining recommendations.


Key Security Focus Areas
(Top areas to focus on based on your Secure Score)

Based on your current Secure Score, here are the most important areas to focus on:
  • Ensure 'Phishing-resistant MFA strength' is required for Administrators
    (7 points to gain)
    High priority
  • Ensure password protection is enabled for on-prem Active Directory
    (6 points to gain)
    High priority
  • Ensure Sign-in frequency is enabled and browser sessions are not persistent for Administrative users
    (5 points to gain)
    High priority
  • Ensure third party integrated applications are not allowed
    (5 points to gain)
    High priority
  • Ensure 'LinkedIn account connections' is disabled
    (3 points to gain)
    High priority
Quick Tips to Improve Your Score

  • Enable Multi-Factor Authentication:
    Prioritize enabling MFA for all users, especially administrators.
  • Enable Mailbox Auditing:
    Turn on mailbox auditing to track actions performed on mailboxes.
Secure Score Comparison

Your Organization: 286.48 of 368 (77.8%)

All Tenants Average: 51.13%

Similar-sized Organizations: 45.92%

Security Recommendations

Demo snapshot: 15 of 30 source rows are included. Search and CSV export cover these 15 rows.

TitleAssessmentRemediationReferenceUrlCategoryImplementedStateStateCommentScoreMaxScorePointsToGainPercentCompleteImplementationPriority
Ensure 'Phishing-resistant MFA strength' is required for AdministratorsAuthentication strength is a Conditional Access control that allows administrators to specify which combination of authentication methods can be used to access a resource. For example, they can make only phishing-resistant authentication methods available to access a sensitive resource. But to access a non-sensitive resource, they can allow less secure multifactor authentication (MFA) combinations, such as password + SMS. Microsoft has 3 built-in authentication strengths. MFA strength, Passwordless MFA strength, and Phishing-resistant MFA strength. Ensure administrator roles are using a CA policy with Phishing-resistant MFA strength.Administrators can then enroll using one of 3 methods: FIDO2 Security Key Windows Hello for Business Certificate-based authentication (Multi-Factor) NOTE: Additional steps to configure methods such as FIDO2 keys are not covered here but can be found in related MS articles in the references section. The Conditional Access policy only ensures 1 of the 3 methods is used. WARNING: Administrators must be pre-registered for a strong authentication mechanism before this Conditional Access Policy is enforced. Additionally, as stated elsewhere in the CIS Benchmark a break-glass administrator account should be excluded from this policy to ensure unfettered access in the case of an emergency. Rationale: Sophisticated attacks targeting MFA are more prevalent as the use of it becomes more widespread. These 3 methods are considered phishing-resistant as they remove passwords from the login workflow. It also ensures that public/private key exchange can only happen between the devices and a registered provider which prevents login to fake or phishing websites. References: FIDO2 security keys Enable passwordless security key sign-in Conditional Access authentication strength How To: Configure the Microsoft Entra ID multifactor authentication registration policyTo create a phishing-resistant MFA CA policy for users in administrative roles: Navigate to the Microsoft Entra ID admin center https://entra.microsoft.com. Click to expand Microsoft Entra ID > Applications select Enterprise Applications. Under Security, select Conditional Access. Click New policy. Go to Users > Users and groups > Include > Select users and groups > Directory roles Add at least the Directory roles listed after these steps. Select Cloud apps or actions > All cloud apps (and don't exclude any apps). Grant > Grant Access with Require authentication strength (Preview): Phishing-resistant MFA Click 'Select' Set Enable policy to Report-only and click Create At minimum these directory roles should be included for the policy: Application administrator Authentication administrator Billing administrator Cloud application administrator Conditional Access administrator Exchange administrator Global administrator Global reader Helpdesk administrator Password administrator Privileged authentication administrator Privileged role administrator Security administrator SharePoint administrator User administrator WARNING: Ensure administrators are pre-registered with strong authentication before enforcing the policy. After which the policy must be set to On.https://learn.microsoft.com/en-us/azure/active-directory/identity-protection/howto-identity-protection-configure-mfa-policyIdentityNot ImplementedDefault 0770High
Ensure password protection is enabled for on-prem Active DirectoryEnable Microsoft Entra ID Password Protection to Active Directory to protect against the use of common passwords. Note: This recommendation applies to Hybrid deployments only, and will have no impact unless working with on-premises Active Directory.To setup Microsoft Entra ID Password Protection, use the following steps: Download and install the Microsoft Entra ID Password Proxies and DC Agents from the following location: https://www.microsoft.com/download/details.aspx?id=57071 After the installation is complete, login to https://admin.microsoft.com as a Global Administrator. Go to Admin centers and click on Microsoft Entra ID. Select Microsoft Entra ID then Security on the left side navigation followed by Authentication methods. Select Password protection and toggle Enable password protection on Windows Server Active Directory to Yes and Mode to Enforced Click Save at the top of the right pane.https://learn.microsoft.com/en-us/azure/active-directory/authentication/howto-password-ban-bad-on-premises-operationsIdentityNot ImplementedDefault 0660High
Ensure Sign-in frequency is enabled and browser sessions are not persistent for Administrative usersForcing a time out for MFA will help ensure that sessions are not kept alive for an indefinite period of time, ensuring that browser sessions are not persistent will help in prevention of drive-by attacks in web browsers, this also prevents creation and saving of session cookies leaving nothing for an attacker to take.To configure Sign-in frequency and browser sessions persistence for Administrative users: Navigate to Microsoft Entra admin center https://entra.microsoft.com/.Click to Protection > Conditional Access. Click New policy Click Users and groups Under Include select Select users and groups and then select Directory roles. At a minimum, select the roles in the section below: Go to Target resources > Cloud apps > Include > select All cloud apps (and don't exclude any apps). Under Access controls > Grant > select Grant access > check Require multi-factor authentication (and nothing else). Under Session select Sign-in frequency and set to at most 4 hours for E3 tenants. E5 tenants with PIM can be set to a maximum value of 24 hours. Check Persistent browser session then select Never persistent in the drop-down menu. For Enable Policy select On and click Save At minimum these directory roles should be included for MFA: Application administrator Authentication administrator Billing administrator Cloud application administrator Conditional Access administrator Exchange administrator Global administrator Global reader Helpdesk administrator Password administrator Privileged authentication administrator Privileged role administrator Security administrator SharePoint administrator User administratorhttps://aad.portal.azure.com/#view/Microsoft_AAD_ConditionalAccess/PolicyBladeIdentityNot ImplementedDefault 0550High
Ensure third party integrated applications are not allowedDo not allow third party integrated applications to connect to your services. You should not allow third party integrated applications to connect to your services unless there is a very clear value and you have robust security controls in place. While there are legitimate uses, attackers can grant access from breached accounts to third party applications to exfiltrate data from your tenancy without having to maintain the breached accountIn the Microsoft 365 Admin Center Select Admin Centers and Microsoft Entra ID.Select Users from the Azure navigation paneSelect Users settings.Set App registrations is set to No.Click Save.https://learn.microsoft.com/en-us/microsoft-365/enterprise/integrated-apps-and-azure-ads?view=o365-worldwideIdentityNot ImplementedDefault 0550High
Ensure 'LinkedIn account connections' is disabledLinkedIn account connections allow users to connect their Microsoft work or school account with LinkedIn. Once a user connects their accounts, information and highlights from LinkedIn become available in some Microsoft apps and services. Disabling LinkedIn integration can prevent potential phishing attacks and risk scenarios where an external party could accidentally disclose sensitive information.To disable LinkedIn account connections: Navigate to Microsoft Entra ID admin center https://entra.microsoft.com/ Click to expand Microsoft Entra ID > Users select User settings. Under LinkedIn account connections select No. Click Save at the top of the page.https://learn.microsoft.com/en-us/azure/active-directory/enterprise-users/linkedin-integrationIdentityNot ImplementedDefault 0330High
Ensure 'User owned apps and services' is restrictedBy default, users can install add-ins in their Microsoft Word, Excel, and PowerPoint applications, allowing data access within the application.Do not allow users to install add-ins in Word, Excel, or PowerPoint. Rationale:Attackers commonly use vulnerable and custom-built add-ins to access data in user applications.While allowing users to install add-ins by themselves does allow them to easily acquire useful add-ins that integrate with Microsoft applications, it can represent a risk if not used and monitored carefully.Disable future user's ability to install add-ins in Microsoft Word, Excel, or PowerPoint helps reduce your threat-surface and mitigate this risk. Impact: Implementation of this change will impact both end users and administrators. End users will not be able to install add-ins that they may want to install.To prohibit users installing Office Store add-ins and starting 365 trials: Navigate to Microsoft 365 admin center https://admin.microsoft.com. Click to expand Settings Select Org settings.3. Under Services select User owned apps and services.4. Uncheck Let users access the Office Store and Let users start trials on behalf of your organization.5. Click Save. Note - Due to temporary limitations, only "Let users access the Office Store" will be taken into account in scoring this control. It is suggested to uncheck both settings for the sake of better posture.https://learn.microsoft.com/en-us/microsoft-365/admin/manage/manage-addins-in-the-admin-center?view=o365-worldwideIdentityNot ImplementedDefault 0330High
Ensure 'Microsoft Azure Management' is limited to administrative rolesThe Microsoft Azure Management application governs various Azure services and can be secured through the implementation of a Conditional Access policy. This policy can restrict specific user accounts from accessing the related portals and applications. When Conditional Access policy is targeted to the Microsoft Azure Management application, within the Conditional Access policy app picker the policy will be enforced for tokens issued to application IDs of a set of services closely bound to the portal. Azure Resource Manager Azure portal, which also covers the Microsoft Entra ID admin center Azure Data Lake Application Insights API Log Analytics API Microsoft Azure Management should be restricted to specific pre-determined administrative roles. NOTE: Blocking Microsoft Azure Management will prevent non-privileged users from signing into most portals other than Microsoft 365 Defender and Microsoft Purview. Rationale:Blocking sign-in to Azure Management applications and portals enhances security of sensitive data by restricting access to privileged users. This mitigates potential exposure due to administrative errors or software vulnerabilities, as well as acting as a defense in depth measure against security breaches.To enable Microsoft Azure Management restrictions: Navigate to the Microsoft Entra ID admin center https://entra.microsoft.com. Click expand Protection > Conditional Access select Policies. Click New Policy and then name the policy. Select Users > Include > All Users Select Users > Exclude > Directory roles and select only administrative roles (See below). Select Cloud apps or actions > Select apps > Select then click the box next to Windows Azure Service Management API. Click Select. Select Grant > Block access and click Select. Ensure Enable Policy is On then click Create. WARNING: Exclude Global Administrator at a minimum to avoid being locked out. Report-only is a good option to use when testing any Conditional Access policy for the first time. Below is the list of administrative roles that can be excluded: Application administrator Authentication administrator Billing administrator Cloud application administrator Conditional Access administrator Exchange administrator Global administrator Global reader Helpdesk administrator Password administrator Privileged authentication administrator Privileged role administrator Security administrator SharePoint administrator User administrator Default Value: No - Non-administrators can access the Microsoft Entra ID administration portal.https://learn.microsoft.com/en-us/azure/active-directory/conditional-access/concept-conditional-access-cloud-appsIdentityNot ImplementedDefault 0330High
Ensure Administrative accounts are separate and cloud-onlyAdministrative accounts are special privileged accounts that could have varying levels of access to data, users, and settings. Regular user accounts should never be utilized for Administrative tasks and care should be taken, in the case of a hybrid environment, to keep Administrative accounts separated from on-prem accounts. Administrative accounts should not have applications assigned so that they have no access to potentially vulnerable services (EX. email, Teams, SharePoint, etc.) and only access to perform tasks as needed for Administrative purposes.1. Navigate to Microsoft 365 admin center 2. Click to expand Users select Active users.3. Sort by the Licenses column.4. For each user account in an administrative role verify the following: The account is Cloud only (not synced) The account is assigned a license that is not associated with applications i.e. (Microsoft Entra ID P1, Microsoft Entra ID P2)https://learn.microsoft.com/en-us/microsoft-365/admin/add-users/add-users?view=o365-worldwideIdentityNot ImplementedDefault 0330High
Ensure modern authentication for Exchange Online is enabledModern authentication in Microsoft 365 enables authentication features like multifactor authentication (MFA) using smart cards, certificate-based authentication (CBA), and third-party SAML identity providers. When you enable modern authentication in Exchange Online, Outlook 2016 and Outlook 2013 use modern authentication to log in 'to Microsoft 365 mailboxes. When you disable modern authentication in Exchange Online, Outlook 2016 and Outlook 2013 use basic authentication to log in to Microsoft 365 mailboxes. When users initially configure certain email clients, like Outlook 2013 and Outlook 2016, they may be required to authenticate using enhanced authentication mechanisms, such as multifactor authentication. Other Outlook clients that are available in Microsoft 365 (for example, Outlook Mobile and Outlook for Mac 2016) always use modern uthentication to log in to Microsoft 365 mailboxesTo enable modern authentication, use the Exchange Online PowerShell Module: Run the Microsoft Exchange Online PowerShell Module. Connect to Exchange Online using "Connect-ExchangeOnline." Run the following PowerShell command: Set-OrganizationConfig -OAuth2ClientProfileEnabled $Truehttps://learn.microsoft.com/en-us/Exchange/clients-and-mobile-in-exchange-online/enable-or-disable-modern-authentication-in-exchange-online?redirectSourcePath=%252fen-us%252farticle%252fenable-or-disable-modern-authentication-in-exchange-online-58018196-f918-49cd-8238-56f57f38d662IdentityImplementedDefault 330100High
Ensure user consent to apps accessing company data on their behalf is not allowedTo reduce the risk of malicious applications attempting to trick users into granting them access to your organization's data, we recommend that you allow user consent only for applications that have been published by a verified publisher.Go to Microsoft Entra ID > Enterprise applications > Consent and permissions. Go to Consent and permissions Select Allow user consent for apps from verified publishers, for selected permissions (Recommended) to follow Microsofts best practice. Learn more Configure the low-impact permissions that users are allowed to consent to. Click Select permissions to classify as low impact. Learn more Optionally, you can help your users to consent to apps that require admin consent by setting up the admin consent workflow. This step is recommended but not required to get full score. Learn how to configure the admin consent workflowhttps://go.microsoft.com/fwlink/?linkid=2119526IdentityImplementedDefault 440100High
Enable Conditional Access policies to block legacy authenticationToday, most compromising sign-in attempts come from legacy authentication. Older office clients such as Office 2010 don’t support modern authentication and use legacy protocols such as IMAP, SMTP, and POP3. Legacy authentication does not support multifactor authentication (MFA). Even if an MFA policy is configured in your environment, bad actors can bypass these enforcements through legacy protocols.We provide step-by-step guidance to select and enable the right method to block legacy authentication for your organization in the Microsoft 365 admin center (part of the MFA wizard). Go to the Microsoft 365 MFA wizard If you would like to perform the implementation yourself, first check what Microsoft Entra ID license you have under Prerequisites in Microsoft Secure Score or see your license type under "Basic information" in the Microsoft Entra ID Overview. If youve invested in Microsoft Entra ID Premium P1 or P2 licenses, you can create a Conditional Access policy from scratch or by using a template. Follow these steps to create a Conditional Access policy from scratch or by using a template If you would like to perform the implementation yourself and youre using Microsoft Entra ID Free, turn on security defaults. Note: Security defaults and Conditional Access cant be used side by side. Enable security defaultshttps://go.microsoft.com/fwlink/?linkid=2095010IdentityImplementedDefault 880100High
Ensure custom banned passwords lists are usedWith Microsoft Entra ID Password Protection, default global banned password lists are automatically applied to all users in an Microsoft Entra ID tenant. To support business and security needs, custom banned password lists can be defined. When users change or reset their passwords, these banned password lists are checked to enforce the use of strong passwords. A custom banned password list should include some of the following examples: Brand names Product names Locations, such as company headquarters Company-specific internal terms Abbreviations that have specific company meaning Rationale:Creating a new password can be difficult regardless of one's technical background. It is common to look around one's environment for suggestions when building a password, however, this may include picking words specific to the organization as inspiration for a password. An adversary may employ what is called a 'mangler' to create permutations of these specific words in an attempt to crack passwords or hashes making it easier to reach their goal.Create a custom banned password list: Navigate to Microsoft Entra ID admin center https://entra.microsoft.com/ Click to expand Microsoft Entra ID > Protect & Secure > Authentication methods Select Password protection Set Enforce custom list to Yes In Custom banned password list create a list using suggestions outlined in this document. Click Save NOTE: Below is a list of examples that can be used as a starting place. Check the references section for more. Brand names Product names Locations, such as company headquarters Company-specific internal terms Abbreviations that have specific company meaninghttps://learn.microsoft.com/en-us/azure/active-directory/authentication/tutorial-configure-custom-password-protectionIdentityImplementedDefault 550100High
Start your Defender for Identity deployment, installing Sensors on Domain Controllers and other eligible servers.Installing Microsoft Defender for Identity sensors provides you with the ability to detect advanced threats in your entire identity infrastructure. Actionable security alerts are generated through the analysis of network traffic and security events.Go to the activation page in Settings, where you can view the discovered servers recommended for onboarding to the Defender for Identity new sensor. To see the sensors already installed in your environment, go to the sensor page. You will be scored as a percentage of your deployment progress.https://security.microsoft.com/settings/identities?tabid=sensorIdentityImplementedAlternateMitigation No onprem servers exist 550100High
Change password for accounts with leaked credentialsThis report lists users whose valid credentials have been leaked. When cybercriminals compromise valid passwords of legitimate users, the criminals often share those credentials. This is usually done by posting them publicly on the dark web or paste sites or by trading or selling the credentials on the black market. The Microsoft leaked credentials service acquires username/password pairs by monitoring public and dark websites and by working with: • Researchers • Law enforcement • Security teams at Microsoft • Other trusted sourcesIt is recommended to Enable Microsoft Entra ID Identity Protection user risk policies to automatically require users to change passwords when their credentials are leaked. Alternatively, you can follow the steps below to change password for individual users. 1. Sign in to the Admin Center: Sign in to the Microsoft Entra Admin Center (entra.microsoft.com) with an administrator account. 2. Navigate to Users: Select "Users" from the left-hand navigation menu. 3. Select the User Account: Find and select the user account that needs a password change. 4. Reset Password: Click on "Reset password" and choose whether to auto-generate a password or manually set a new password.https://aka.ms/leakedPasswordIdentityImplementedDefault 550100High
Ensure multifactor authentication is enabled for all users in administrative rolesRequiring multifactor authentication (MFA) for administrative roles makes it harder for attackers to access accounts. Administrative roles have higher permissions than typical users. If any of those accounts are compromised, your entire organization is exposed. At a minimum, protect the following roles: Global administrator Authentication administrator Billing administrator Conditional Access administrator Exchange administrator Helpdesk administrator Security administrator SharePoint administrator User administratorWe provide step-by-step guidance to select and enable the right MFA method for your organization in the Microsoft 365 admin center. Go to the Microsoft 365 MFA wizard If you would like to perform the implementation yourself, first check what Microsoft Entra ID license you have under Prerequisites in Microsoft Secure Score or see your license type under "Basic information" in the Microsoft Entra ID Overview. If youve invested in Microsoft Entra ID Premium P1 or P2 licenses, you can create a Conditional Access policy from scratch or by using a template. Follow these steps to create a Conditional Access policy from scratch or by using a template If you would like to perform the implementation yourself and youre using Microsoft Entra ID Free, turn on security defaults. Note: Security defaults and Conditional Access cant be used side by side. Enable security defaults Keep track of your admins progress of registering authentication methods by going to Microsoft Entra ID > Security > Authentication methods > User registration details (requires Microsoft Entra ID Premium P1 or P2 licenses). Go to User registration detailshttps://go.microsoft.com/fwlink/?linkid=2095010IdentityImplementedDefault 10100100High
Active Security Alerts
TitleCategorySeverityStatusCreated DateSourceDescriptionAlert ID
Connection to a custom network indicatorCommandAndControlinformationalnewAlert2026-01-29 11:59Microsoft Defender ATPAn endpoint has connected to a URL or domain in your list of custom indicators.daa0c8da23-b743-4346-b695-6d5f4eb5904d_1
Connection to a custom network indicatorCommandAndControlinformationalnewAlert2026-01-21 09:38Microsoft Defender ATPAn endpoint has connected to a URL or domain in your list of custom indicators.da313f4eaa-62b9-4524-80ba-d0d90e3b1a28_1
Connection to a custom network indicatorCommandAndControlinformationalnewAlert2026-01-14 09:11Microsoft Defender ATPAn endpoint has connected to a URL or domain in your list of custom indicators.da85be2b74-f61b-41ac-a8e6-684e12dd7847_1
Anti-Spam Policies
IdentityNameAdminDisplayNameWhenCreatedWhenChangedEnabledBulkThresholdMarkAsSpamBulkMailHighConfidenceSpamActionSpamActionBulkSpamActionPhishSpamActionAllowedSenderDomainsBlockedSenderDomainsAppliesToPriorityRecipients
DefaultDefault03/31/2023 14:01:5708/15/2024 18:11:287OnMoveToJmfMoveToJmfMoveToJmfMoveToJmfAll DomainsDefaultAll Users
Standard Preset Security Policy1680264259421Standard Preset Security Policy168026425942103/31/2023 14:04:1908/15/2024 18:11:296OnQuarantineMoveToJmfMoveToJmfQuarantineAll DomainsDefaultAll Users
Anti-Phishing Policies
IdentityNameEnabledAdminDisplayNameWhenCreatedWhenChangedPhishThresholdLevelEnableSpoofIntelligenceEnableUnauthenticatedSenderEnableMailboxIntelligenceEnableMailboxIntelligenceProtectionEnableTargetedUserProtectionEnableSimilarUsersSafetyTipsEnableSimilarDomainsSafetyTipsEnableUnusualCharactersSafetyTipsIsDefaultRecommendedPolicyTypeStatusAppliesToPriorityRecipients
Office365 AntiPhish DefaultOffice365 AntiPhish DefaultTrue03/31/2023 14:02:0708/15/2024 18:11:28StandardTrueTrueTrueFalseFalseFalseFalseFalseTrueCustomOnAll DomainsDefaultAll Users
Standard Preset Security Policy1680264257925Standard Preset Security Policy1680264257925True03/31/2023 14:04:1808/16/2024 00:28:24More AggressiveTrueTrueTrueTrueTrueTrueTrueTrueFalseStandardOnAll DomainsPresetAll Users
Safe Attachment Policies
IdentityNameAdminDisplayNameWhenCreatedWhenChangedActionActionOnErrorEnableRedirectRedirectAddressStatusAppliesToPriorityRecipients
Built-In Protection PolicyBuilt-In Protection Policy03/31/2023 14:02:1308/15/2024 18:11:28BlockTrueFalseOnAll DomainsDefaultAll Users
Standard Preset Security Policy1680264262845Standard Preset Security Policy168026426284503/31/2023 14:04:2208/15/2024 18:11:29BlockTrueFalseOnAll DomainsDefaultAll Users
Safe Links Policies
IdentityNameAdminDisplayNameWhenCreatedWhenChangedAllowClickThroughDoNotAllowClickThroughDoNotRewriteUrlsEnableForInternalSendersScanUrlsTrackClicksUseTranslatedNotificationTextIsBuiltInProtectionRecommendedPolicyTypeStatusAppliesToPriorityRecipients
Built-In Protection PolicyBuilt-In Protection Policy03/31/2023 14:02:1106/06/2026 20:15:12TrueFalseTrueTrueTrueCustomOnAll DomainsBuilt-in/PresetAll Users
Standard Preset Security Policy1680264264244Standard Preset Security Policy168026426424403/31/2023 14:04:2406/06/2026 20:15:12FalseTrueTrueTrueFalseStandardOnAll DomainsBuilt-in/PresetAll Users
Exchange Connectors
No Exchange connectors are configured in your tenant.

This is normal for organizations using standard Exchange Online mail flow without any custom routing requirements.
Transport Rules
No transport rules were found in your Exchange Online organization.

This means you don't have any custom mail flow rules configured, which is normal for organizations that don't require special mail handling.
Device Platform Distribution
Operating System Platform Overview


Windows: 3 device(s)

OS Version Distribution

Windows Versions

Device Ownership


Company: 3 device(s)

Device Details
ActivationLockBypassCodeAndroidSecurityPatchLevelAzureAdDeviceIdAzureAdRegisteredComplianceGracePeriodExpirationDateTimeComplianceStateDeviceCategoryDisplayNameDeviceCompliancePolicyStatesDeviceConfigurationStatesDeviceEnrollmentTypeDeviceNameDeviceRegistrationStateEasActivatedEasActivationDateTimeEasDeviceIdEmailAddressEnrolledDateTimeEnrollmentProfileNameEthernetMacAddressExchangeAccessStateExchangeAccessStateReasonExchangeLastSuccessfulSyncDateTimeFreeStorageSpaceInBytesIccidIdImeiIsEncryptedIsSupervisedJailBrokenLastSyncDateTimeLogCollectionRequestsManagedDeviceNameManagedDeviceOwnerTypeManagementAgentManagementCertificateExpirationDateManagementStateManufacturerMeidModelNotesOSVersionOperatingSystemPartnerReportedThreatStatePhoneNumberPhysicalMemoryInBytesRemoteAssistanceSessionErrorDetailsRemoteAssistanceSessionUrlRequireUserEnrollmentApprovalSerialNumberSubscriberCarrierTotalStorageSpaceInBytesUdidUserDisplayNameUserIdUserPrincipalNameUsersWiFiMacAddressAdditionalPropertiesConfigurationManagerFeaturesDeviceActionsCategoryInfoHealthAttestationStateProtectionState
dfebcd48-69ef-45f1-b3c4-9fa4d06105c4True06/14/2026 02:44:44noncompliantUnknownwindowsAzureADJoinLABPC02registeredTrue01/01/0001 00:00:006D4ADF9F216DDED29E5DAD3F2F8267C7AlexW@robinm365lab.onmicrosoft.com10/16/2025 14:34:32nonenone01/01/0001 00:00:002975229542434cf7fd0-489e-474e-b2d1-16fcca472640TrueFalseUnknown05/15/2026 00:52:26AlexW_Windows_10/16/2025_2:34 PMcompanymdm03/24/2027 22:43:08managedMicrosoft CorporationVirtual Machine10.0.26200.8457Windowsunknown04624-5087-7238-8400-1436-5874-4963359156224Alex Wilberc62ffd29-0c0c-40f9-b043-53153ae934ebAlexW@robinm365lab.onmicrosoft.comSystem.Collections.Generic.Dictionary`2[System.String,System.Object]CompliancePolicy: False, DeviceConfiguration: False, Inventory: False, ModernApps: False, ResourceAccess: False, WindowsUpdateForBusiness: FalseNoneCustom CategoryLast Update: , Health Status: AV Version: , Real-time Protection: Disabled, Malware Protection: Disabled, Engine:
bd1d2454-1107-4cb9-ab72-417091137511True06/14/2026 23:15:13noncompliantUnknownwindowsAzureADJoinLABPC05registeredTrue01/01/0001 00:00:00F42E86166D795E42AFA0B2CAC32F11B0GradyA@robinm365lab.onmicrosoft.com01/14/2026 09:29:19nonenone01/01/0001 00:00:003165860659203d3bbef-6797-4bc3-814a-3217fca38d44TrueFalseUnknown05/15/2026 03:47:26GradyA_Windows_1/14/2026_9:29 AMcompanymdm01/13/2027 22:26:52managedMicrosoft CorporationVirtual Machine10.0.26200.8457Windowsunknown07862-3357-3129-6244-2344-9366-8463359156224Grady Archie3e357ab3-0994-4227-8c86-d0d4b939288cGradyA@robinm365lab.onmicrosoft.comSystem.Collections.Generic.Dictionary`2[System.String,System.Object]CompliancePolicy: False, DeviceConfiguration: False, Inventory: False, ModernApps: False, ResourceAccess: False, WindowsUpdateForBusiness: FalseNoneCustom CategoryLast Update: , Health Status: AV Version: , Real-time Protection: Disabled, Malware Protection: Disabled, Engine:
0eb07d67-3af5-4dba-8181-978e0c588ad2True06/14/2026 00:09:45noncompliantUnknownwindowsAzureADJoinLABPC01registeredTrue01/01/0001 00:00:00AC02361ED5B700136861E907BFC23E50AdeleV@robinm365lab.onmicrosoft.com09/23/2025 12:58:38nonenone01/01/0001 00:00:0028929163264964302a2-fa6f-4e16-944a-124658d24812TrueFalseUnknown05/14/2026 23:16:18AdeleV_Windows_9/23/2025_12:58 PMcompanymdm03/02/2027 22:36:57managedMicrosoft CorporationVirtual Machine10.0.26200.8457Windowsunknown08081-2281-3271-2427-8299-0186-6163359156224Adele Vance6230834d-4d5c-4c28-bfe2-1674fdc9e7beAdeleV@robinm365lab.onmicrosoft.comSystem.Collections.Generic.Dictionary`2[System.String,System.Object]CompliancePolicy: False, DeviceConfiguration: False, Inventory: False, ModernApps: False, ResourceAccess: False, WindowsUpdateForBusiness: FalseNoneCustom CategoryLast Update: , Health Status: AV Version: , Real-time Protection: Disabled, Malware Protection: Disabled, Engine:
Compliance Policy Status Overview
Policy Compliance Summary

Per-Policy Compliance Status

PolicyNamePlatformCompliantNonCompliantErrorConflictNotApplicable
Default Device Compliance Policy10003000
Device Compliance Status
Non-Compliant Devices
DeviceNameDeviceIdUserIdUserPrincipalNameDeviceTypeModelManufacturerSerialNumberOperatingSystemOSVersionComplianceStateLastSyncDateTimeIsEncryptedIsSupervisedJailBrokenManagementAgentEnrollmentTypeOwnerType
LABPC0234cf7fd0-489e-474e-b2d1-16fcca472640c62ffd29-0c0c-40f9-b043-53153ae934ebAlexW@robinm365lab.onmicrosoft.comVirtual MachineMicrosoft Corporation4624-5087-7238-8400-1436-5874-49Windows10.0.26200.8457noncompliant05/15/2026 00:52:26TrueFalseUnknownmdmcompany
LABPC0503d3bbef-6797-4bc3-814a-3217fca38d443e357ab3-0994-4227-8c86-d0d4b939288cGradyA@robinm365lab.onmicrosoft.comVirtual MachineMicrosoft Corporation7862-3357-3129-6244-2344-9366-84Windows10.0.26200.8457noncompliant05/15/2026 03:47:26TrueFalseUnknownmdmcompany
LABPC01964302a2-fa6f-4e16-944a-124658d248126230834d-4d5c-4c28-bfe2-1674fdc9e7beAdeleV@robinm365lab.onmicrosoft.comVirtual MachineMicrosoft Corporation8081-2281-3271-2427-8299-0186-61Windows10.0.26200.8457noncompliant05/14/2026 23:16:18TrueFalseUnknownmdmcompany
Defender Agent Status
Defender Agent Health Summary


Total reporting devices: 3
Agent State Distribution

Defender Agent Details
Active Malware Detections
No active malware detections found.
Unhealthy Firewall Endpoints
✓ No unhealthy firewall endpoints detected. All reporting devices have Windows Firewall in a healthy state.
Compliance Policies

Demo snapshot: 15 of 17 source rows are included. Search and CSV export cover these 15 rows.

DisplayNameDescriptionPlatformCreatedDateTimeLastModifiedDateTimeVersionId
Win - OIB - Compliance - U - Defender for Endpoint - v3.1Imported by Intune Hydration KitWindows02/17/2026 10:25:5602/17/2026 10:25:561121f2346-db2e-491a-b2bb-bb80e0ec6a8f
Android-Compliance-FullyManaged-StrictAndroid Compliance Policy for Fully Managed Devices (strict settings) - Imported by Intune Hydration KitUnknown02/17/2026 10:26:4402/17/2026 10:26:44129b0777a-c96f-4813-a5e0-4bbfeb86c91c
Android-Compliance-FullyManagedAndroid Compliance Policy for Fully Managed Devices - Imported by Intune Hydration KitUnknown02/17/2026 10:26:4402/17/2026 10:26:4412a280ef9-9068-4217-ab96-7376e83c1fa3
MacOS - OIB - Compliance - U - Device Security - v1.0Imported by Intune Hydration KitmacOS02/17/2026 10:25:4402/17/2026 10:25:44145fbfc02-2c72-404e-af06-faad1f6977b4
MacOS - OIB - Compliance - U - Device Health - v1.0Imported by Intune Hydration KitmacOS02/17/2026 10:25:4302/17/2026 10:25:431479ff42a-bf02-489d-b163-59357bad59d2
Win - OIB - Compliance - U - Password - v3.1Imported by Intune Hydration KitWindows02/17/2026 10:25:5802/17/2026 10:25:58156028236-ded7-4701-9169-84453babd576
macOS Compliance - StrictCompliance Policy for macOS Devices (strict) - Imported by Intune Hydration KitmacOS02/17/2026 10:26:4702/17/2026 10:26:47157f61f54-06bc-48ef-b4b2-bfa0f2576ba2
Windows Compliance PolicyWindows Compliance Policy using GUI settings - Imported by Intune Hydration KitWindows02/17/2026 10:26:4802/17/2026 10:26:48179655415-b4ed-49fc-957e-892aaf60302c
iOS Compliance - StrictiOS Compliance Policy (strict) - Imported by Intune Hydration KitiOS02/17/2026 10:26:4502/17/2026 10:26:4517a2a5152-b33e-4a24-a67f-05918f2f22a4
iOS ComplianceiOS Compliance Policy - Imported by Intune Hydration KitiOS02/17/2026 10:26:4502/17/2026 10:26:45195b40ed4-df65-4a84-8007-5ab53eada1d0
Win - OIB - Compliance - U - Device Health - v3.1Imported by Intune Hydration KitWindows02/17/2026 10:25:5702/17/2026 10:25:571baf8e014-0782-4c68-898b-469016d3a22c
MacOS - OIB - Compliance - U - Password - v1.0Imported by Intune Hydration KitmacOS02/17/2026 10:25:4502/17/2026 10:25:451cdad351a-17fd-4edf-8c91-ad30d65acbff
Win - OIB - Compliance - U - Device Security - v3.1Imported by Intune Hydration KitWindows02/17/2026 10:25:5702/17/2026 10:25:571d2d81c81-f5e2-455f-bebf-0c010def631f
Win11 Compliance PolicyWindows09/25/2025 06:48:5809/25/2025 06:49:402db12c64e-da08-439e-a6a7-90106df76dac
Windows Custom ComplianceChecks Manufacturer, Firewall, Malware and Bitlocker - Imported by Intune Hydration KitWindows02/17/2026 10:26:4902/17/2026 10:26:491dd330635-9934-4a3f-a7fc-363c5c2c75d5
Configuration Policies

Demo snapshot: 15 of 91 source rows are included. Search and CSV export cover these 15 rows.

NameDescriptionPolicyTypePlatformCreatedDateTimeLastModifiedDateTimeVersionId
AutoPatch UpdatesUpdate RingWindows10/02/2025 11:15:5210/02/2025 11:35:212979452d6-e6d6-43d8-88c4-18ef6355680c
Win - OIB - WUfB - Ring 1 - Pilot - v3.0Devices in this ring recieve updates immediately after release with 1 day grace period before a forced reboot. - Imported by Intune Hydration KitUpdate RingWindows02/17/2026 10:26:3802/17/2026 10:26:3815fc031bb-753f-4916-b98c-2d4ed7d0b434
Win - OIB - WUfB - Ring 2 - UAT - v3.0Devices in this ring receive updates 3 days after release and have a 0-day deadline on install with 2 day grace period before a forced reboot. - Imported by Intune Hydration KitUpdate RingWindows02/17/2026 10:26:3902/17/2026 10:26:391795b82a4-7cc7-413a-b95b-416d7ca2f676
Win - OIB - WUfB - Ring 3 - Production - v3.0Devices in this ring receive updates 10 days after release and have a 2-day deadline on install with 1 day grace period before a forced reboot. - Imported by Intune Hydration KitUpdate RingWindows02/17/2026 10:26:3902/17/2026 10:26:391e96a53f4-1ddf-4d1d-a997-0e270af1bf55
ASR PolicySettings CatalogWindows10/30/2025 06:09:4710/30/2025 06:09:4785529386-7194-45bf-8afd-b938422e15da
Defender AV PolicySettings CatalogWindows10/30/2025 06:06:2011/03/2025 14:01:47d66d167e-d305-4617-975e-c60e5be79318
Deploy EDR PolicySettings CatalogWindows10/30/2025 16:39:5710/30/2025 16:39:57be59b904-7c2c-40c1-8b94-173264c865fc
Enable Edge Smart ScreenSettings CatalogWindows10/30/2025 17:35:5610/30/2025 20:30:35d8f6bcc0-5c2b-4ae7-9d16-7445f65503e1
Endpoint Security BaselineSettings CatalogWindows03/02/2026 14:47:4503/02/2026 14:47:457c75d546-a0b2-480c-b377-8d57bf19e9c5
M365 Apps Security BaselineSettings CatalogWindows10/02/2025 07:54:2810/02/2025 07:54:28639c921c-852f-4bbd-8ba9-29cc2c90f1ab
MacOS - OIB - Authentication - D - Platform SSO - v1.0Imported by Intune Hydration KitSettings CatalogmacOS02/17/2026 10:25:4602/17/2026 10:25:460770fba4-3b33-4347-ba5d-c938dd33acea
MacOS - OIB - Defender Antivirus - D - Antivirus Configuration - v1.0NOTE: This policy requires deployment of the Defender application and a valid Defender for Endpoint P1/P2 or Defender for Business license: https://learn.microsoft.com/en-us/defender-endpoint/mac-install-with-intune - Imported by Intune Hydration KitSettings CatalogmacOS02/17/2026 10:25:4702/17/2026 10:25:47aa665039-a604-4360-8797-95f3f3b12e69
MacOS - OIB - Defender Antivirus - D - MDE Configuration - v1.0NOTE: This policy requires deployment of the Defender application and a valid Defender for Endpoint P1/P2 or Defender for Business license: https://learn.microsoft.com/en-us/defender-endpoint/mac-install-with-intune - Imported by Intune Hydration KitSettings CatalogmacOS02/17/2026 10:25:4702/17/2026 10:25:47342dec14-16a0-4d8b-a454-a33df6d3dc1e
MacOS - OIB - Device Security - D - Accounts and Login - v1.0Imported by Intune Hydration KitSettings CatalogmacOS02/17/2026 10:25:4802/17/2026 10:25:482ad7cb2c-5555-4e08-a472-d092f2a871f2
MacOS - OIB - Device Security - D - Restrictions - v1.0Imported by Intune Hydration KitSettings CatalogmacOS02/17/2026 10:25:4802/17/2026 10:25:48c0ce22f4-0f0f-411d-aeef-95443814b8e6
App Deployment Status Overview
App Installation Summary

Per-App Install Status (Sorted by Failures)

Demo snapshot: 15 of 24 source rows are included. Search and CSV export cover these 15 rows.

AppNamePlatformPublisherVersionInstalledFailedFailure%PendingNotInstalled
Adobe Acrobat Reader DC5ADOBE INC.000%00
WhatsApp Messenger1WhatsApp LLC000%00
WhatsApp5WhatsApp Inc.000%00
Visual Studio Code5Microsoft Corporation000%00
VLC5VideoLAN000%00
Spotify - Music and Podcasts5Spotify AB000%00
Slack5Slack Technologies Inc.000%00
PowerShell5Microsoft Corporation000%00
Power BI Desktop5Microsoft Corporation000%00
Notion5Notion Labs Inc.000%00
Mozilla Firefox5Mozilla148.0.0.0300%00
Microsoft Teams5Microsoft Corporation000%00
Microsoft Intune1Microsoft Corporation000%00
Microsoft Edge for macOS3Microsoft000%00
Microsoft Copilot5Microsoft Corporation000%00
Mobile Apps Inventory
DisplayNamePublisherAppTypeCreatedDateTimeLastModifiedDateTimePublishingStateIsAssignedIsFeaturedPrivacyInformationUrlInformationUrlOwnerDeveloperNotes
Microsoft 365 Apps for macOSMicrosoftUnknown02/17/2026 10:27:4702/17/2026 10:27:47publishedFalsehttps://privacy.microsoft.com/privacystatementhttps://products.office.com/explore-office-for-homeMicrosoftMicrosoftImported by Intune Hydration Kit
Microsoft Edge for macOSMicrosoftUnknown02/17/2026 10:27:4802/17/2026 10:27:48publishedFalsehttps://privacy.microsoft.com/privacystatementhttps://www.microsoft.com/windows/microsoft-edgeMicrosoftImported by Intune Hydration Kit
App Protection Policies
Android App Protection Policies

DisplayNameDescriptionCreatedDateTimeLastModifiedDateTimeIsAssignedAppGroupTypeAllowedDataStorageLocationsPinRequiredScreenCaptureBlockedEncryptAppData
Android Enterprise Enhanced Data Protection v1.7This app protection policy introduces data leakage prevention mechanisms and minimum OS requirements. This is the configuration that is applicable to most mobile users accessing work or school data. - Imported by Intune Hydration Kit02/17/2026 10:27:0102/17/2026 10:27:01FalseoneDriveForBusiness, sharePointTrueTrueTrue
Android M365 Protected Apps10/03/2025 12:53:5810/03/2025 12:53:58TrueoneDriveForBusinessTrueTrueTrue
Android Enterprise High Data Protection v1.7This app protection policy is for devices used by specific users or groups who are uniquely high risk (for example, users who handle highly sensitive data where unauthorized disclosure causes considerable material loss to the organization). - Imported by Intune Hydration Kit02/17/2026 10:27:0502/17/2026 10:27:05FalseoneDriveForBusiness, sharePointTrueTrueTrue
Android App Protection PolicyMicrosoft Apps Only - Imported by Intune Hydration Kit02/17/2026 10:26:5402/17/2026 10:26:54FalseoneDriveForBusiness, sharePointTrueTrueTrue
Android Enterprise Basic Data Protection v1.6This app protection policy ensures that apps with work or school account data are protected with a PIN, encrypted, validates Android device attestation, and enables selective wipe operations. - Imported by Intune Hydration Kit02/17/2026 10:26:5802/17/2026 10:26:58FalseNot configuredTrueFalseTrue
Android - Baseline - BYOD - App ProtectionImported by Intune Hydration Kit02/17/2026 10:25:4002/17/2026 10:25:40FalseoneDriveForBusiness, sharePointTrueTrueTrue
iOS App Protection Policies

DisplayNameDescriptionCreatedDateTimeLastModifiedDateTimeIsAssignedAppGroupTypeAllowedDataStorageLocationsPinRequiredFaceIdBlockedAppDataEncryptionType
iOS/iPadOS Enterprise Basic Data Protection v1.1This app protection policy ensures that apps with work or school account data are protected with a PIN, encrypted, and enables selective wipe operations. - Imported by Intune Hydration Kit02/17/2026 10:27:0002/17/2026 10:27:00FalseNot configuredTrueFalsewhenDeviceLocked
iOS/iPadOS Enterprise High Data Protection v1.4This app protection policy is for devices used by specific users or groups who are uniquely high risk (for example, users who handle highly sensitive data where unauthorized disclosure causes considerable material loss to the organization). - Imported by Intune Hydration Kit02/17/2026 10:27:0802/17/2026 10:27:08FalseoneDriveForBusiness, sharePointTrueFalsewhenDeviceLocked
iOS - Baseline - BYOD - App ProtectionImported by Intune Hydration Kit02/17/2026 10:25:4202/17/2026 10:25:42FalseoneDriveForBusiness, sharePointTrueFalsewhenDeviceLocked
iOS App ProtectionProtect Microsoft Apps - Imported by Intune Hydration Kit02/17/2026 10:26:5602/17/2026 10:26:56FalseoneDriveForBusiness, sharePointTrueFalsewhenDeviceLocked
iOS/iPadOS Enterprise Enhanced Data Protection v1.4This app protection policy introduces data leakage prevention mechanisms and minimum OS requirements. This is the configuration that is applicable to most mobile users accessing work or school data. - Imported by Intune Hydration Kit02/17/2026 10:27:0302/17/2026 10:27:03FalseoneDriveForBusiness, sharePointTrueFalsewhenDeviceLocked
Mobile App Configurations
No mobile app configurations found.
Targeted Managed App Configurations
No targeted managed app configurations found.
Windows Information Protection Policies
No Windows Information Protection policies found.
Managed App Policies (General)
DisplayNameDescriptionCreatedDateTimeLastModifiedDateTimePolicyType
iOS/iPadOS Enterprise Enhanced Data Protection v1.4This app protection policy introduces data leakage prevention mechanisms and minimum OS requirements. This is the configuration that is applicable to most mobile users accessing work or school data. - Imported by Intune Hydration Kit02/17/2026 10:27:0302/17/2026 10:27:03Unknown
Android Enterprise Enhanced Data Protection v1.7This app protection policy introduces data leakage prevention mechanisms and minimum OS requirements. This is the configuration that is applicable to most mobile users accessing work or school data. - Imported by Intune Hydration Kit02/17/2026 10:27:0102/17/2026 10:27:01Unknown
Windows M365 App Protection10/06/2025 09:06:3010/06/2025 09:06:30Unknown
Android Enterprise High Data Protection v1.7This app protection policy is for devices used by specific users or groups who are uniquely high risk (for example, users who handle highly sensitive data where unauthorized disclosure causes considerable material loss to the organization). - Imported by Intune Hydration Kit02/17/2026 10:27:0502/17/2026 10:27:05Unknown
Android App Protection PolicyMicrosoft Apps Only - Imported by Intune Hydration Kit02/17/2026 10:26:5402/17/2026 10:26:54Unknown
iOS/iPadOS Enterprise High Data Protection v1.4This app protection policy is for devices used by specific users or groups who are uniquely high risk (for example, users who handle highly sensitive data where unauthorized disclosure causes considerable material loss to the organization). - Imported by Intune Hydration Kit02/17/2026 10:27:0802/17/2026 10:27:08Unknown
Android M365 Protected Apps10/03/2025 12:53:5810/03/2025 12:53:58Unknown
iOS/iPadOS Enterprise Basic Data Protection v1.1This app protection policy ensures that apps with work or school account data are protected with a PIN, encrypted, and enables selective wipe operations. - Imported by Intune Hydration Kit02/17/2026 10:27:0002/17/2026 10:27:00Unknown
iOS App ProtectionProtect Microsoft Apps - Imported by Intune Hydration Kit02/17/2026 10:26:5602/17/2026 10:26:56Unknown
Android Enterprise Basic Data Protection v1.6This app protection policy ensures that apps with work or school account data are protected with a PIN, encrypted, validates Android device attestation, and enables selective wipe operations. - Imported by Intune Hydration Kit02/17/2026 10:26:5802/17/2026 10:26:58Unknown
Android - Baseline - BYOD - App ProtectionImported by Intune Hydration Kit02/17/2026 10:25:4002/17/2026 10:25:40Unknown
iOS - Baseline - BYOD - App ProtectionImported by Intune Hydration Kit02/17/2026 10:25:4202/17/2026 10:25:42Unknown
Raw Exchange Reports
Mailbox Statistics Reports

Demo snapshot: 15 of 28 source rows are included. Search and CSV export cover these 15 rows.

Report Refresh DateUser Principal NameDisplay NameIs DeletedDeleted DateCreated DateLast Activity DateItem CountStorage Used (Byte)Issue Warning Quota (Byte)Prohibit Send Quota (Byte)Prohibit Send/Receive Quota (Byte)Deleted Item CountDeleted Item Size (Byte)Deleted Item Quota (Byte)Has ArchiveReport Period
2026-06-26Admin2@robinm365lab.onmicrosoft.comAdmin UserFalse2023-01-311269232161421052266987521063004405761073741824000032212254720False30
2026-06-26admin@robinm365lab.onmicrosoft.comRobin PieterseFalse2023-01-312026-05-125520290954151052266987521063004405761073741824000032212254720False30
2026-06-26cannonfodder3@robinm365lab.myo365.siteCannon Fodder3 - This time it's seriousFalse2026-05-121638404225261334937653150220288536870912000032212254720False30
2026-06-26Bill@robinm365lab.myo365.siteBill NyeFalse2023-03-3168834252105261334937653150220288536870912000032212254720False30
2026-06-26cannonfodder@robinm365lab.myo365.siteCannon FodderFalse2026-05-121354693455261334937653150220288536870912000032212254720False30
2026-06-26Bob@robinm365lab.myo365.siteBob BuilderFalse2023-03-313077324165261334937653150220288536870912000032212254720False30
2026-06-26creditors@robinm365lab.myo365.sitecreditorsFalse2026-03-0444123995261334937653150220288536870912000032212254720False30
2026-06-26cannonfodder4@robinm365lab.myo365.siteCannon Fodder4 - Now it's personalFalse2026-05-121608370385261334937653150220288536870912000032212254720False30
2026-06-26dmarcreports@robinm365lab.myo365.siteDMARC ReportsFalse2026-03-0440130265261334937653150220288536870912000032212254720False30
2026-06-26info@robinm365lab.myo365.siteInfoFalse2026-03-041324573545261334937653150220288536870912000032212254720False30
2026-06-26cannonfodder2@robinm365lab.myo365.siteCannon Fodder - The SequelFalse2026-05-121384762855261334937653150220288536870912000032212254720False30
2026-06-26AlexW@robinm365lab.onmicrosoft.comAlex WilberFalse2025-07-022025-07-03607027850171052266987521063004405761073741824000032212254720False30
2026-06-26MeganB@robinm365lab.onmicrosoft.comMegan BowenFalse2025-07-024565447531052266987521063004405761073741824000032212254720False30
2026-06-26PradeepG@robinm365lab.onmicrosoft.comPradeep GuptaFalse2025-07-024455311511052266987521063004405761073741824000032212254720False30
2026-06-26PattiF@robinm365lab.onmicrosoft.comPatti FernandezFalse2025-07-022025-07-034503640031052266987521063004405761073741824000032212254720False30
Email Activity Reports

Demo snapshot: 15 of 21 source rows are included. Search and CSV export cover these 15 rows.

Report Refresh DateUser Principal NameDisplay NameIs DeletedDeleted DateLast Activity DateSend CountReceive CountRead CountMeeting Created CountMeeting Interacted CountAssigned ProductsReport Period
2026-06-27MeganB@robinm365lab.onmicrosoft.comMegan BowenFalse00000MICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)30
2026-06-27MiriamG@robinm365lab.onmicrosoft.comMiriam GrahamFalse2025-07-0300000MICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)30
2026-06-27AdeleV@robinm365lab.onmicrosoft.comAdele VanceFalse2026-05-1300000MICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)+MICROSOFT DEFENDER FOR ENDPOINT P230
2026-06-27DiegoS@robinm365lab.onmicrosoft.comDiego SicilianiFalse2025-10-2200000MICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)30
2026-06-27NestorW@robinm365lab.onmicrosoft.comNestor WilkeFalse2025-07-0300000MICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)30
2026-06-27LidiaH@robinm365lab.onmicrosoft.comLidia HollowayFalse00000MICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)30
2026-06-27HenriettaM@robinm365lab.onmicrosoft.comHenrietta MuellerFalse00000MICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)30
2026-06-27GradyA@robinm365lab.onmicrosoft.comGrady ArchieFalse00000MICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)30
2026-06-27admin@robinm365lab.onmicrosoft.comRobin PieterseFalse2026-05-1204000MICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)+MICROSOFT POWER AUTOMATE FREE30
2026-06-27IsaiahL@robinm365lab.onmicrosoft.comIsaiah LangerFalse2025-07-0300000MICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)30
2026-06-27PattiF@robinm365lab.onmicrosoft.comPatti FernandezFalse2025-07-0300000MICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)30
2026-06-27JoniS@robinm365lab.onmicrosoft.comJoni ShermanFalse00000MICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)30
2026-06-27nancyd@robinm365lab.myo365.siteNancy DrewFalse00000MICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)30
2026-06-27PradeepG@robinm365lab.onmicrosoft.comPradeep GuptaFalse00000MICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)30
2026-06-27Admin2@robinm365lab.onmicrosoft.comAdmin UserFalse04000MICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)30
Raw OneDrive Reports
OneDrive Storage Usage Reports

Demo snapshot: 15 of 19 source rows are included. Search and CSV export cover these 15 rows.

Report Refresh DateSite IdSite URLOwner Display NameIs DeletedLast Activity DateFile CountActive File CountStorage Used (Byte)Storage Allocated (Byte)Owner Principal NameReport Period
2026-06-27179690d6-f0b6-414e-87ae-bd592557970eIsaiah LangerFalse001268771099511627776IsaiahL@robinm365lab.onmicrosoft.com30
2026-06-2734bcde3c-8fa5-467b-af50-cede94c92c3eNestor WilkeFalse001268821099511627776NestorW@robinm365lab.onmicrosoft.com30
2026-06-2738f5ea44-26e8-4fe5-95d8-e7503e7483a3Megan BowenFalse001268931099511627776MeganB@robinm365lab.onmicrosoft.com30
2026-06-273bf597f8-576b-4c16-b70e-44e1c789e30bRobin PieterseFalse2025-10-088021854301099511627776admin@robinm365lab.onmicrosoft.com30
2026-06-2743a982fa-5bb8-4e48-a9c7-b8c42aabd46dJoni ShermanFalse001268581099511627776JoniS@robinm365lab.onmicrosoft.com30
2026-06-275455ea68-0d76-4590-b57a-3b0c9e10bbf7Lee GuFalse001268471099511627776LeeG@robinm365lab.onmicrosoft.com30
2026-06-2758c72358-7613-4a74-aa68-0d32f2a006d1Admin UserFalse0017360471099511627776Admin2@robinm365lab.onmicrosoft.com30
2026-06-275e4d0cd4-bde4-4d9a-8eee-36313c2921c6Johanna LorenzFalse001269081099511627776JohannaL@robinm365lab.onmicrosoft.com30
2026-06-27642fb1cb-5c0b-43d6-8144-873b4c908e4dLidia HollowayFalse001269011099511627776LidiaH@robinm365lab.onmicrosoft.com30
2026-06-2786ea78e3-b48f-4402-a8e0-86a337708766Lynne RobbinsFalse001268691099511627776LynneR@robinm365lab.onmicrosoft.com30
2026-06-279a512c8b-78ff-46cc-b51f-a2294b453c2aBill NyeFalse0017224731099511627776Bill@robinm365lab.myo365.site30
2026-06-279e053bb5-ef08-4ca6-97fc-d45e8fa71fafAlex WilberFalse2026-03-03003210651099511627776AlexW@robinm365lab.onmicrosoft.com30
2026-06-27a849a5ce-8e70-4b91-b5d8-dfa913b88a2fPradeep GuptaFalse001268981099511627776PradeepG@robinm365lab.onmicrosoft.com30
2026-06-27c503133d-6f62-412d-9a73-50b305132b0fPatti FernandezFalse001269041099511627776PattiF@robinm365lab.onmicrosoft.com30
2026-06-27d623167b-c14c-44bc-953b-cbb16da01fddMiriam GrahamFalse001269011099511627776MiriamG@robinm365lab.onmicrosoft.com30
OneDrive File Activity Reports

Demo snapshot: 15 of 21 source rows are included. Search and CSV export cover these 15 rows.

Report Refresh DateUser Principal NameIs DeletedDeleted DateLast Activity DateViewed Or Edited File CountSynced File CountShared Internally File CountShared Externally File CountAssigned ProductsReport Period
2026-06-27MeganB@robinm365lab.onmicrosoft.comFalse0000MICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)30
2026-06-27MiriamG@robinm365lab.onmicrosoft.comFalse0000MICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)30
2026-06-27AdeleV@robinm365lab.onmicrosoft.comFalse0000MICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)+MICROSOFT DEFENDER FOR ENDPOINT P230
2026-06-27DiegoS@robinm365lab.onmicrosoft.comFalse2025-10-170000MICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)30
2026-06-27NestorW@robinm365lab.onmicrosoft.comFalse0000MICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)30
2026-06-27LidiaH@robinm365lab.onmicrosoft.comFalse0000MICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)30
2026-06-27HenriettaM@robinm365lab.onmicrosoft.comFalse0000MICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)30
2026-06-27GradyA@robinm365lab.onmicrosoft.comFalse0000MICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)30
2026-06-27admin@robinm365lab.onmicrosoft.comFalse2025-10-080000MICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)+MICROSOFT POWER AUTOMATE FREE30
2026-06-27IsaiahL@robinm365lab.onmicrosoft.comFalse0000MICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)30
2026-06-27PattiF@robinm365lab.onmicrosoft.comFalse0000MICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)30
2026-06-27JoniS@robinm365lab.onmicrosoft.comFalse0000MICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)30
2026-06-27nancyd@robinm365lab.myo365.siteFalse0000MICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)30
2026-06-27PradeepG@robinm365lab.onmicrosoft.comFalse0000MICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)30
2026-06-27Admin2@robinm365lab.onmicrosoft.comFalse0000MICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)30
Raw SharePoint Reports
SharePoint Site Activity Reports

Demo snapshot: 15 of 21 source rows are included. Search and CSV export cover these 15 rows.

Report Refresh DateUser Principal NameIs DeletedDeleted DateLast Activity DateViewed Or Edited File CountSynced File CountShared Internally File CountShared Externally File CountVisited Page CountAssigned ProductsReport Period
2026-06-27MeganB@robinm365lab.onmicrosoft.comFalse00000MICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)30
2026-06-27MiriamG@robinm365lab.onmicrosoft.comFalse00000MICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)30
2026-06-27AdeleV@robinm365lab.onmicrosoft.comFalse2025-10-3000000MICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)+MICROSOFT DEFENDER FOR ENDPOINT P230
2026-06-27DiegoS@robinm365lab.onmicrosoft.comFalse2025-10-3000000MICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)30
2026-06-27NestorW@robinm365lab.onmicrosoft.comFalse00000MICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)30
2026-06-27LidiaH@robinm365lab.onmicrosoft.comFalse00000MICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)30
2026-06-27HenriettaM@robinm365lab.onmicrosoft.comFalse00000MICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)30
2026-06-27GradyA@robinm365lab.onmicrosoft.comFalse00000MICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)30
2026-06-27admin@robinm365lab.onmicrosoft.comFalse2025-10-3000000MICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)+MICROSOFT POWER AUTOMATE FREE30
2026-06-27IsaiahL@robinm365lab.onmicrosoft.comFalse00000MICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)30
2026-06-27PattiF@robinm365lab.onmicrosoft.comFalse00000MICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)30
2026-06-27JoniS@robinm365lab.onmicrosoft.comFalse00000MICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)30
2026-06-27nancyd@robinm365lab.myo365.siteFalse00000MICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)30
2026-06-27PradeepG@robinm365lab.onmicrosoft.comFalse00000MICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)30
2026-06-27Admin2@robinm365lab.onmicrosoft.comFalse00000MICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)30
SharePoint Storage Reports
Report Refresh DateSite IdSite URLOwner Display NameIs DeletedLast Activity DateFile CountActive File CountPage View CountVisited Page CountStorage Used (Byte)Storage Allocated (Byte)Root Web TemplateOwner Principal NameReport Period
2026-06-270468fee8-38e3-497a-9c1d-6ac055600498EXCO OwnersFalse2000155735627487790694400Groupexo@robinm365lab.myo365.site30
2026-06-27585a5b1f-81f6-4b66-898a-2a77f3388ad4ProjectX OwnersFalse2025-10-303000198462227487790694400GroupProjectX@robinm365lab.onmicrosoft.com30
2026-06-277c9e977d-3521-4b5d-a15e-dc0a630bf9deAll Company OwnersFalse2025-10-307000161560527487790694400Groupallcompany@robinm365lab.onmicrosoft.com30
2026-06-277da68b1b-a74a-4b0f-a56b-d8eef2db0e8cDesign OwnersFalse2025-10-157000178330827487790694400Groupdesign@robinm365lab.onmicrosoft.com30
2026-06-27b495f494-8e4f-48f7-9f18-437423b08c63Finance OwnersFalse2025-10-095000162367127487790694400Groupfinance@robinm365lab.onmicrosoft.com30
2026-06-27b9afc7f6-15c9-4d7a-96dd-64613ecae9b8Lab_Notifications OwnersFalse2023-04-174000159003927487790694400GroupLab_Notifications@robinm365lab.onmicrosoft.com30
2026-06-2707c34d0b-79fc-46fc-98ec-0f047c4a8023Global AdministratorFalse2025-10-202000412951527487790694400Tenant Admin Site30
2026-06-270850c9c3-e782-4aaf-ba7b-5c70ec908b9aGlobal AdministratorFalse0000157639327487790694400Basic Search Center30
2026-06-270e1e7cb4-33dd-4f84-9a8a-fb154b53da97Global AdministratorFalse2025-10-227000159691327487790694400Site Page Publishing30
2026-06-27168ee6d4-66b6-49cf-8c17-e7829cdb77ecNT Service\sptimerv4False2000104448127487790694400SharePoint Online Tenant Fundamental Site30
2026-06-27945188c8-6f36-4f94-9095-e9d62c42c16bGlobal AdministratorFalse2025-10-303000188992327487790694400App Catalog Site30
2026-06-27a1533b1b-2c90-4330-ad7f-b736eef3a57dGlobal AdministratorFalse500022632027487790694400Compliance Policy Center30
2026-06-27fa11d8b4-e508-4aab-a693-2a28e7384b54Global AdministratorFalse2023-07-049000184614127487790694400My Site Host30
2026-06-27dde393a8-2715-44e5-b12f-d8531c1b5347Global AdministratorFalse0000159034827487790694400Team Site30
Raw Teams Reports
Teams User Activity Reports

Demo snapshot: 15 of 21 source rows are included. Search and CSV export cover these 15 rows.

Report Refresh DateUser IdUser Principal NameLast Activity DateIs DeletedDeleted DateAssigned ProductsTeam Chat Message CountPrivate Chat Message CountCall CountMeeting CountMeetings Organized CountMeetings Attended CountAd Hoc Meetings Organized CountAd Hoc Meetings Attended CountScheduled One-time Meetings Organized CountScheduled One-time Meetings Attended CountScheduled Recurring Meetings Organized CountScheduled Recurring Meetings Attended CountAudio DurationVideo DurationScreen Share DurationAudio Duration In SecondsVideo Duration In SecondsScreen Share Duration In SecondsHas Other ActionUrgent MessagesPost MessagesTenant Display NameShared Channel Tenant Display NamesReply MessagesIs LicensedReport Period
2026-06-27dd288739-ce68-4b7f-83d0-e96aa0327f95MeganB@robinm365lab.onmicrosoft.comFalseMICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)000000000000PT0SPT0SPT0S000No00TURRITO0Yes30
2026-06-27c32d70a9-bc5f-4dde-921e-a3fa996fff17MiriamG@robinm365lab.onmicrosoft.comFalseMICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)000000000000PT0SPT0SPT0S000No00TURRITO0Yes30
2026-06-276230834d-4d5c-4c28-bfe2-1674fdc9e7beAdeleV@robinm365lab.onmicrosoft.comFalseMICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)+MICROSOFT DEFENDER FOR ENDPOINT P2000000000000PT0SPT0SPT0S000No00TURRITO0Yes30
2026-06-278b7b7f0d-4bd8-4e20-bbde-610e23992bdfDiegoS@robinm365lab.onmicrosoft.com2025-10-08FalseMICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)000000000000PT0SPT0SPT0S000No00TURRITO0Yes30
2026-06-271e6cc427-a473-4b29-b55d-977d6d7259aaNestorW@robinm365lab.onmicrosoft.comFalseMICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)000000000000PT0SPT0SPT0S000No00TURRITO0Yes30
2026-06-27f06d2737-5881-4a0a-bff9-f3b35997fc7aLidiaH@robinm365lab.onmicrosoft.comFalseMICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)000000000000PT0SPT0SPT0S000No00TURRITO0Yes30
2026-06-2781535a30-cdc8-458e-ba1a-03f30bf70907HenriettaM@robinm365lab.onmicrosoft.comFalseMICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)000000000000PT0SPT0SPT0S000No00TURRITO0Yes30
2026-06-273e357ab3-0994-4227-8c86-d0d4b939288cGradyA@robinm365lab.onmicrosoft.comFalseMICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)000000000000PT0SPT0SPT0S000No00TURRITO0Yes30
2026-06-278484af7c-b04a-4b33-8f0e-e43e78cd2b1cadmin@robinm365lab.onmicrosoft.com2025-10-08FalseMICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)+MICROSOFT POWER AUTOMATE FREE000000000000PT0SPT0SPT0S000No00TURRITO0Yes30
2026-06-27a044fe85-deea-4c4a-86a5-d8408b1cd5b5IsaiahL@robinm365lab.onmicrosoft.comFalseMICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)000000000000PT0SPT0SPT0S000No00TURRITO0Yes30
2026-06-27bbaedfe3-6cc8-4cf6-aeda-631e62ccd35ePattiF@robinm365lab.onmicrosoft.comFalseMICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)000000000000PT0SPT0SPT0S000No00TURRITO0Yes30
2026-06-277e1a95da-86d1-4e06-8468-dc69958b1b1eJoniS@robinm365lab.onmicrosoft.comFalseMICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)000000000000PT0SPT0SPT0S000No00TURRITO0Yes30
2026-06-2776d23cd2-a82c-4d42-8439-591080199113nancyd@robinm365lab.myo365.siteFalseMICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)000000000000PT0SPT0SPT0S000No00TURRITO0Yes30
2026-06-275ca08e6a-91f3-4332-a9c0-ed074d8d570bPradeepG@robinm365lab.onmicrosoft.comFalseMICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)000000000000PT0SPT0SPT0S000No00TURRITO0Yes30
2026-06-27ecfbab3c-01dc-4233-a25a-629de34d81b7Admin2@robinm365lab.onmicrosoft.comFalseMICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)000000000000PT0SPT0SPT0S000No00TURRITO0Yes30
Teams Channel Usage Reports
Report Refresh DateTeam IdTeam NameLast Activity DateTeam TypeIs DeletedReport PeriodActive UsersActive ChannelsChannel MessagesReactionsMeetings OrganizedPost MessagesReply MessagesUrgent MessagesMentionsGuestsActive Shared ChannelsActive External Users
2026-06-26150ad1d2-284c-4428-b36d-8ba60a0f5131EXCOPrivateFalse30000000000000
2026-06-2622643fd6-4cf9-4065-9469-3f96f98b8bf4FinancePrivateFalse30000000000000
2026-06-268d6a1816-e705-4967-8477-d95d9127bca3DesignPrivateFalse30000000000000
2026-06-269190e1aa-80d0-47d4-9c2d-6d914f8bb43aLab_Notifications2023-04-04PrivateFalse30000000000000
2026-06-26e80dfefe-14ab-4327-967d-b2b01efd3106Turrito2025-10-06PublicFalse30000000000000
Raw M365 Reports
M365 Apps Usage Reports

Demo snapshot: 15 of 21 source rows are included. Search and CSV export cover these 15 rows.

Report Refresh DateUser Principal NameLast Activation DateLast Activity DateReport PeriodWindowsMacMobileWebOutlookWordExcelPowerPointOneNoteTeamsOutlook (Windows)Word (Windows)Excel (Windows)PowerPoint (Windows)OneNote (Windows)Teams (Windows)Outlook (Mac)Word (Mac)Excel (Mac)PowerPoint (Mac)OneNote (Mac)Teams (Mac)Outlook (Mobile)Word (Mobile)Excel (Mobile)PowerPoint (Mobile)OneNote (Mobile)Teams (Mobile)Outlook (Web)Word (Web)Excel (Web)PowerPoint (Web)OneNote (Web)Teams (Web)
2026-06-26LynneR@robinm365lab.onmicrosoft.com30NoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNo
2026-06-26NestorW@robinm365lab.onmicrosoft.com30NoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNo
2026-06-26LeeG@robinm365lab.onmicrosoft.com30NoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNo
2026-06-26GradyA@robinm365lab.onmicrosoft.com30NoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNo
2026-06-26PradeepG@robinm365lab.onmicrosoft.com30NoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNo
2026-06-26AdeleV@robinm365lab.onmicrosoft.com2026-05-1330NoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNo
2026-06-26nancyd@robinm365lab.myo365.site30NoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNo
2026-06-26JoniS@robinm365lab.onmicrosoft.com30NoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNo
2026-06-26HenriettaM@robinm365lab.onmicrosoft.com30NoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNo
2026-06-26admin@robinm365lab.onmicrosoft.com2026-03-3030NoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNo
2026-06-26DiegoS@robinm365lab.onmicrosoft.com2026-01-2930NoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNo
2026-06-26IsaiahL@robinm365lab.onmicrosoft.com30NoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNo
2026-06-26PattiF@robinm365lab.onmicrosoft.com30NoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNo
2026-06-26MiriamG@robinm365lab.onmicrosoft.com30NoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNo
2026-06-26AlexW@robinm365lab.onmicrosoft.com2025-10-222026-02-1730NoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNo
Office 365 Groups Activity Reports
Report Refresh DateGroup Display NameIs DeletedOwner Principal NameLast Activity DateGroup TypeMember CountExternal Member CountExchange Received Email CountSharePoint Active File CountYammer Posted Message CountYammer Read Message CountYammer Liked Message CountExchange Mailbox Total Item CountExchange Mailbox Storage Used (Byte)SharePoint Total File CountSharePoint Site Storage Used (Byte)Group IdReport Period
2026-06-26EXCOFalseadmin@robinm365lab.onmicrosoft.com2026-05-12Private0019942358621557356150ad1d2-284c-4428-b36d-8ba60a0f513130
2026-06-26FinanceFalseadmin@robinm365lab.onmicrosoft.com2025-10-09Private101964231825162367122643fd6-4cf9-4065-9469-3f96f98b8bf430
2026-06-26ProjectXFalseadmin@robinm365lab.onmicrosoft.com2025-10-30Private402011839373198462286ad11b6-8ba7-4dbe-abab-96383876bbf030
2026-06-26DesignFalseadmin@robinm365lab.onmicrosoft.com2026-05-12Private10266480764717833088d6a1816-e705-4967-8477-d95d9127bca330
2026-06-26All CompanyFalseadmin@robinm365lab.onmicrosoft.com2025-10-30Public102603086477161560591065b22-5993-4eac-8f9e-31fda44432c130
2026-06-26Lab_NotificationsFalseadmin@robinm365lab.onmicrosoft.com2023-04-17Private10203542791415900399190e1aa-80d0-47d4-9c2d-6d914f8bb43a30
2026-06-26TurritoFalseadmin@robinm365lab.onmicrosoft.com2026-05-12Public19025839087100e80dfefe-14ab-4327-967d-b2b01efd310630
M365 Apps Activations Reports

Demo snapshot: 15 of 25 source rows are included. Search and CSV export cover these 15 rows.

Report Refresh DateUser Principal NameDisplay NameIs DeletedDeleted DateHas Exchange LicenseHas OneDrive LicenseHas SharePoint LicenseHas Skype For Business LicenseHas Yammer LicenseHas Teams LicenseExchange Last Activity DateOneDrive Last Activity DateSharePoint Last Activity DateSkype For Business Last Activity DateYammer Last Activity DateTeams Last Activity DateExchange License Assign DateOneDrive License Assign DateSharePoint License Assign DateSkype For Business License Assign DateYammer License Assign DateTeams License Assign DateAssigned Products
2026-06-27MeganB@robinm365lab.onmicrosoft.comMegan BowenFalseTrueTrueTrueFalseTrueTrue2025-07-022025-07-022025-07-022025-07-022025-07-02MICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)
2026-06-27MiriamG@robinm365lab.onmicrosoft.comMiriam GrahamFalseTrueTrueTrueFalseTrueTrue2025-07-032025-07-022025-07-022025-07-022025-07-022025-07-02MICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)
2026-06-27AdeleV@robinm365lab.onmicrosoft.comAdele VanceFalseTrueTrueTrueFalseTrueTrue2026-05-132025-10-302025-07-022025-07-022025-07-022025-07-022025-07-02MICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)+MICROSOFT DEFENDER FOR ENDPOINT P2
2026-06-27cannonfodder2@robinm365lab.myo365.siteCannon Fodder - The SequelFalseFalseFalseFalseFalseFalseFalse
2026-06-27DiegoS@robinm365lab.onmicrosoft.comDiego SicilianiFalseTrueTrueTrueFalseTrueTrue2025-10-222025-10-172025-10-302025-10-082025-07-022025-07-022025-07-022025-07-022025-07-02MICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)
2026-06-27NestorW@robinm365lab.onmicrosoft.comNestor WilkeFalseTrueTrueTrueFalseTrueTrue2025-07-032025-07-022025-07-022025-07-022025-07-022025-07-02MICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)
2026-06-27LidiaH@robinm365lab.onmicrosoft.comLidia HollowayFalseTrueTrueTrueFalseTrueTrue2025-07-022025-07-022025-07-022025-07-022025-07-02MICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)
2026-06-27HenriettaM@robinm365lab.onmicrosoft.comHenrietta MuellerFalseTrueTrueTrueFalseTrueTrue2025-07-022025-07-022025-07-022025-07-022025-07-02MICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)
2026-06-27GradyA@robinm365lab.onmicrosoft.comGrady ArchieFalseTrueTrueTrueFalseTrueTrue2025-07-022025-07-022025-07-022025-07-022025-07-02MICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)
2026-06-27cannonfodder4@robinm365lab.myo365.siteCannon Fodder4 - Now it's personalFalseFalseFalseFalseFalseFalseFalse
2026-06-27admin@robinm365lab.onmicrosoft.comRobin PieterseFalseTrueTrueTrueFalseTrueTrue2026-05-122025-10-082025-10-302025-10-082023-01-312023-01-312023-01-312023-01-312023-01-31MICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)+MICROSOFT POWER AUTOMATE FREE
2026-06-27IsaiahL@robinm365lab.onmicrosoft.comIsaiah LangerFalseTrueTrueTrueFalseTrueTrue2025-07-032025-07-022025-07-022025-07-022025-07-022025-07-02MICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)
2026-06-27PattiF@robinm365lab.onmicrosoft.comPatti FernandezFalseTrueTrueTrueFalseTrueTrue2025-07-032025-07-022025-07-022025-07-022025-07-022025-07-02MICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)
2026-06-27JoniS@robinm365lab.onmicrosoft.comJoni ShermanFalseTrueTrueTrueFalseTrueTrue2025-07-022025-07-022025-07-022025-07-022025-07-02MICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)
2026-06-27nancyd@robinm365lab.myo365.siteNancy DrewFalseTrueTrueTrueFalseTrueTrue2023-07-042023-07-042023-07-042023-07-042023-07-04MICROSOFT 365 E5 DEVELOPER (WITHOUT WINDOWS AND AUDIO CONFERENCING)
Generated using Microsoft Graph API
© 2026