...
First you buy the licence, and assign them and install the Office apps on your computer (or skip this step). Next you
get a whole heap of extra Admin centres in your M365… what nextYou can go through the steps here if you want to try this on your own, but I really recommend getting help.
Step 4 - Threat Protection
“Then you’ll enable Threat Protection and Data Loss Protection”. What is this, and why do we need it, and how do we do it?
Protect you from clicking links or opening files that have malicious content.
So why isn’t that already what Defender on my Laptop is doing?
Ah, it is, it’s just that I already had Defender and Bitlocker with my Windows 10 Pro that came with my Surface device… this is just to give you Defender if you have bought a regular laptop from a regular retailer that is not Windows 10 Pro.
Defender is Microsoft Antivirus, Anti Malware and Anti Ransomware.
Bitlocker is encryption of your laptop contents.
“By default, you'll receive help with core protection against common online threats, but you can customize these settings later to fit your business needs.” And this is where it starts to get complex…
So firstly go through the wizard and get to this point
...
Step 6 - Windows 10 Pro
Ensuring all your laptops are Windows 10 Professional is pretty easy.
...
“Securing and management of your computers and phones”
Next Steps - Not So Advanced Setup
This is stepping through all the steps in the Setup menu in your Microsoft 365 Admin Center
Set Passwords to Never Expire
Data Loss Prevention
The Wizard is a bit stupid for Australia because it only has settings for US and UK sensitive data. And there is no way you are even storing this data, is there?
You go to Customize policies and you are in the depths of hell of M365 Compliance Center and you just want to give up.
Thankfully there is a page on how to set things up for Australia
Go through setting up Australian Financial data
Select the defaults and choose to test it for a bit.
Create additional policies for medical if you need.
Create profiles for Australia Privacy Act, Australia Personal Identifiable Information (PII data). Also you may want the GDPR privacy one (but this is NOT about making you GDPR compliant at all).
Remember to come back and turn them on in a few weeks after testing.
Now remember, to get the benefit out of these tools you actually have to be using Microsoft tools. Turning this on and working with data in Google Sheets or business email in GSuite is not going to do anything. NOTE TO SELF!
Protect Mobile App Data
This is Microsoft Endpoint Manager
Go through the wizard and accept the defaults.
Click on Customize Policies if you want to see more details.
Unfortunately the Wizard did not seem to do anything for me.
It’s all a bit bizarre that they are only talking about setting up new devices.
Following another video I downloaded Outlook and InTune onto Android, and still nothing was set up. I was able to log into Office with no further prompting even after running the wizard.