Microsoft 365 admin guides
Practical fixes for the things that actually go wrong in small Microsoft 365 tenants, with the exact admin-center paths and the caveats nobody mentions until something breaks.
How to require MFA for all users in Microsoft 365
Security defaults, Conditional Access, or legacy per-user MFA — which one applies to your licence, and the exact steps for each.
How to find and remove unused Microsoft 365 licenses
Three kinds of licence waste, where each one hides in the admin center, and why you cannot always cancel the seats you just freed.
How to block legacy authentication in Microsoft 365
Why legacy protocols defeat MFA entirely, how to block them on any licence, and how to find the printer that will break when you do.
How to find inbox rules forwarding mail outside your organization
Setting up a forwarding rule is the first thing an attacker does after taking a mailbox. Where forwarding hides, and how to find all of it.
Click paths verified October 2026. Microsoft moves things; if a path has changed, tell us.