Lesson 1 of 414 min

M365 (Microsoft 365) administration with intent

Conditional Access, shared mailboxes, license SKUs, Exchange Online basics.

Organizational directory structure on a laptop screen — Photo by Christina Morillo on Pexels

Conditional Access (CA (Conditional Access)) policies are the lever for security: require MFA (Multi-Factor Authentication), block legacy auth, require compliant device. Always have a break-glass admin excluded from CA.

Shared mailboxes have no license under 50 GB; over that, they need one. Add users via 'Send As' or 'Full Access' permissions.

Exchange Online: mail flow rules can quarantine, BCC, or redirect mail. Use sparingly — they compound and confuse.

Key takeaways

▸CA + MFA = baseline security
▸Always exclude a break-glass admin from CA
▸Mail flow rules: powerful, easy to lose track of

Areas to show initiative · +15 XP each

Audit a client's CA policies and document each oneBuild a baseline CA policy set (MFA, block legacy, require compliant)

Next: Device policies via Intune / RMM →