+For Microsoft 365 apps like Microsoft Word and Excel, guest access is controlled by the location of the output file, for example, Microsoft SharePoint, Teams, and OneDrive.

+description: "Admins can learn how to add new employees to Microsoft 365 for business and give them access to email, Skype, and Microsoft 365 apps."

+You're in the right place if your new employee needs Microsoft 365, and you're using a [Microsoft 365 plan]( https://www.microsoft.com/microsoft-365/buy/compare-all-microsoft-365-products?rtc=1) that lets you install Microsoft 365 apps like Word and Excel on a computer.

+ **No Microsoft 365 apps in your plan?** Follow the steps below, but skip the sections for installing apps. Instead, use the [Get started at Microsoft365.com](https://support.microsoft.com/office/91a4ec74-67fe-4a84-a268-f6bdf3da1804).

+|Sign in to Microsoft 365 <br/> |Go to [https://www.microsoft365.com](https://www.microsoft365.com), select **Sign in**, and then enter your user ID and password. <br/> |

+|Install Microsoft 365 apps onto your computer. <br/><br/> |When you sign in, the home page has a link to download and install apps like Word and Outlook. Select **Install Microsoft 365**. For instructions, see [Download and install or reinstall Microsoft 365 or Office 2021 on a PC or Mac"](https://support.microsoft.com/office/4414eaaf-0478-48be-9c42-23adc4716658). <br/> |

+|Set up your email in Outlook 2016 . <br/> |Once Microsoft 365 apps are installed on your computer, set up your email. For instructions, see [How to set up Outlook](https://support.microsoft.com/office/6e27792a-9267-4aa4-8bb6-c84ef146101b). <br/> |

+- **Using ActiveDirectory?** [Set up directory synchronization for Microsoft 365](../../enterprise/set-up-directory-synchronization.md). Use the Azure AD Connect tool to replicate Active Directory user accounts (and other Active Directory objects) in Microsoft 365. The sync only adds the user accounts. You must assign licenses to the synced users before they can use email and other Microsoft 365 apps.

+- **Migrating from Exchange?** See [Ways to migrate multiple email accounts to Microsoft 365](/Exchange/mailbox-migration/mailbox-migration). When you migrate multiple mailboxes to Microsoft 365 by using either cutover, staged, or a hybrid Exchange method, you automatically add users as part of the migration. The migration only adds the user accounts. You must assign licenses to the users before they can use email and other Microsoft 365 apps. If you don't assign a license to a user, their mailbox is disabled after a grace period of 30 days. Learn how to [assign licenses to users](../manage/assign-licenses-to-users.md) in the Microsoft 365 admin center.

+After you add a user, you get an email notification from Microsoft. The email contains the person's user ID and password so they can sign in to Microsoft 365. Use your normal process for communicating new passwords. Share the [Employee quickstart guide](https://support.microsoft.com/office/7f34c318-e772-46a5-8c0a-ab86661542d1) with your new users to set up things, like how to [Download and install or reinstall Microsoft 365 or Office 2021 on a PC or Mac](https://support.microsoft.com/office/4414eaaf-0478-48be-9c42-23adc4716658) and how to [Set up Microsoft 365 apps and email on a mobile device](https://support.microsoft.com/office/7dabb6cb-0046-40b6-81fe-767e0b1f014f).

+|Active Directory <br/> |If your business uses **Active Directory** that is synchronizing with Azure AD, you need to delete the user account from Active Directory. You can't do it through Microsoft 365. For instructions, see [Delete a User Account](/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc753730(v=ws.11)). <br/> |

+## User management admin: Delete one or more users from Microsoft 365

+[Remove a former employee from Microsoft 365](remove-former-employee.md) (article)\

+[Add a new employee to Microsoft 365](add-new-employee.md) (article)\

+[Delete a User Account](/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc753730(v=ws.11)): Use these instructions if your business uses **Active Directory** that is synchronizing with Azure AD. You can't do it through Microsoft 365. (article)

+If your former employee had an organization phone, you can use the <a href="https://go.microsoft.com/fwlink/p/?linkid=2059104" target="_blank">Exchange admin center</a> to wipe and block that device so that all organization data is removed from the device and it can no longer connect to Microsoft 365. If your organization uses Basic Mobility and Security to manage mobile devices, you can wipe and block those devices using Basic Mobility and Security.

+When you remove a user's license from Microsoft 365, the PSTN calling number associated with the user will be released. You can assign it to another user.

+If your organization synchronizes user accounts to Microsoft 365 from a local Active Directory environment, you must delete and restore those user accounts in your local Active Directory service. You can't delete or restore them in Microsoft 365.

+We strongly recommend that you set up self-service password reset. This way you don't have to manually reset passwords for your users. Less work for you! To learn how, see [Let users reset their own passwords in Microsoft 365](let-users-reset-passwords.md).

+Try this article: [I forgot the username or password for the account I use with Microsoft 365.](https://support.microsoft.com/office/eba0b4a2-c0ae-472c-99f6-bc63ee2425a8?wt.mc_id=SCL_reset-passwords_AdmHlp)

+- If your business uses Active Directory, for instructions on restoring a user account, see [How to restore deleted user accounts in Microsoft 365, Azure, and Intune](/microsoft-365/troubleshoot/active-directory/restore-deleted-user-accounts).

+|**Settings**|Manage global settings for apps like email, sites, and Microsoft 365. Change your password policy and expiration date. Add and update domain names like contoso.com. Change your organization profile and release preferences. And choose whether partners can access your admin center.|

+|**Setup**|Manage existing domains, turn on and manage multi-factor authentication, manage admin access, migrate user mailboxes to Microsoft 365, manage feature updates, and help users install their Microsoft 365 apps.|

+|**Reports**|See at a glance how your organization is using Microsoft 365 with detailed reports on email use, Microsoft 365 activations, and more. Learn how to use the new [activity reports](../activity-reports/activity-reports.md).|

+Sign in to Microsoft365.com with your work account, and select the app launcher.

+Microsoft 365 is a complete, intelligent solution that includes Microsoft 365, Windows 10, and Enterprise Mobility + Security that empowers everyone to be creative and work together, securely. The following Microsoft 365 subscriptions are available in the admin center for you to try or buy now:

+description: "Understand what you need to know about the latest versions of the Microsoft 365 apps before you go through the sign-up process for Microsoft 365."

+Sign up for Microsoft 365 for business so that your team can begin using the latest versions of Word, Excel, PowerPoint, and other Microsoft 365 apps.

+|[Microsoft 365 Apps for Business](https://www.microsoft.com/microsoft-365/business/microsoft-365-apps-for-business)|<ul><li>Get desktop versions of Microsoft 365 apps: Outlook, Word, Excel, PowerPoint, OneNote (plus Access and Publisher for PC only).</li><li>Store and share files with 1 TB of OneDrive cloud storage per user.</li><li>Use one license to cover fully installed Microsoft 365 apps on five mobile devices, five tablets, and five PCs or Macs per user.</li><li>Automatically update your Microsoft 365 apps with new features and capabilities every month.</li><li>Get help anytime with around-the-clock phone and web support from Microsoft.</li></ul>|

+|[Microsoft 365 Business Basic](https://www.microsoft.com/microsoft-365/business/microsoft-365-business-basic)|<ul><li>Host email with a 50 GB mailbox and custom email domain address.</li><li>Create a hub for teamwork to connect people using Microsoft Teams.</li><li>Use Microsoft 365 apps for the web, including Outlook, Word, Excel, PowerPoint, and OneNote.</li><li>Store and share files with 1 TB of OneDrive cloud storage per user.</li><li>Facilitate online meetings and video conferencing for up to 300 users.</li><li>Get help anytime with around-the-clock phone and web support from Microsoft.</li></ul>|

+|[Microsoft 365 Business Standard](https://www.microsoft.com/microsoft-365/business/microsoft-365-business-standard)|<ul><li>Get desktop versions of Microsoft 365 apps, including Outlook, Word, Excel, PowerPoint, and OneNote (plus Access and Publisher for PC only).</li><li>Host email with a 50 GB mailbox and custom email domain.</li><li>Create a hub for teamwork to connect people using Microsoft Teams.</li><li>Store and share files with 1 TB of OneDrive cloud storage per user.</li><li>Use one license to cover fully installed Microsoft 365 apps on five mobile devices, five tablets, and five PCs or Macs per user.</li><li>Get help anytime with around-the-clock phone and web support from Microsoft.</li></ul>|

+ **Collaborators:** People who collaborate with online files by using OneDrive or SharePoint. Two people are collaborators if one of them reads or edits an online Microsoft 365 app or PDF after the other person has created or modified it, within a 28-day window.

+The content collaboration score for your organization measures at an aggregate (organization) level whether people are consistently reading, creating, or collaborating on online Microsoft 365 files such as Word, Excel, PowerPoint, OneNote, or PDFs, or in OneDrive or SharePoint.

+1. **Header:** Highlights the percentage of people active on Microsoft 365 apps who create files on OneDrive or SharePoint.

+3. **Visualization:** The breakdown in the visualization represents the extent to which people who are using Microsoft 365 apps to create files in OneDrive and SharePoint, as follows:

+ - **OneDrive:** The blue (colored) portion of the bar and the fraction on the bar represent the percentage of people active on Microsoft 365 apps creating content on OneDrive as follows:

+ - Numerator: The number of people who create, modify, upload, sync, check in, copy, or move online Microsoft 365 files in OneDrive within the last 28 days.</br>

+ - **SharePoint:** The blue (colored) portion of the bar and the fraction on the bar represent the percentage of people who are active in Microsoft 365 apps and create content on SharePoint as:</br>

+ - Numerator: The number of people who create, modify, upload, sync, check in, copy, or move online Microsoft 365 files (Microsoft Word, Excel, PowerPoint, or OneNote files) on SharePoint within the last 28 days. </br>

+ - Denominator: The number of people who have access to OneDrive or SharePoint and have accessed Microsoft 365 files within the last 28 days.

+- **User behavior**: some delivery channels require the user to go to a specific location/app to have a chance to see the message (for example, a Microsoft 365 app call-out message can only be delivered to a user who opens the Microsoft 365 app).

+Visit the [Microsoft Tech Community](https://techcommunity.microsoft.com/t5/microsoft-365-groups/bd-p/Microsoft365Groups) to post questions and participate in conversations about Microsoft 365 groups.

+For instructions on how to block sign-in for accounts using Azure AD PowerShell (including many accounts at the same time), see [Block Microsoft 365 user accounts with PowerShell](../../enterprise/block-user-accounts-with-microsoft-365-powershell.md).

+Learn more about what you can do with domains for each type of offering in the [Microsoft 365 feature descriptions](/microsoft-365/admin/m365-feature-descriptions?tabs=Domains).

+> If you just want to download and use Microsoft 365 apps, like Outlook or Word, you don't need to add a domain: [Download and install or reinstall Microsoft 365 or Office 2021 on a PC or Mac](https://support.microsoft.com/office/4414eaaf-0478-48be-9c42-23adc4716658).

+- On the day you change the MX record, make sure to [save your data](/microsoft-365/commerce/subscriptions/cancel-your-subscription#save-your-data) and [uninstall Microsoft 365 if needed](/microsoft-365/commerce/subscriptions/cancel-your-subscription#uninstall-office-optional).

+If your users don't yet have the Microsoft 365 apps installed, you can share the [Employee quick start guide](https://support.microsoft.com/office/7f34c318-e772-46a5-8c0a-ab86661542d1) with your users to set up things, like [Download and install or reinstall Microsoft 365 or Office 2021 on a PC or Mac](https://support.microsoft.com/office/4414eaaf-0478-48be-9c42-23adc4716658) and [Set up Microsoft 365 apps and email on a mobile device](https://support.microsoft.com/office/7dabb6cb-0046-40b6-81fe-767e0b1f014f).

+|Country or region <br/> | This is the country or region where the company is headquartered. The selected country or region determines which services are available to you, the taxes and billing currency for your country or region, and the location of the data center closest to you (see [About license restrictions](https://www.microsoft.com/microsoft-365/business/microsoft-office-license-restrictions)).<br/>NOTE: Once selected, the country or region cannot be changed. If you want to change the selection, you'll have to cancel your subscription and sign up again. For help with this process, [contact support](../get-help-support.md). |

+- **Turn on monthly updates for Microsoft 365**: See whether your organization's Microsoft 365 update frequency is set so that you receive updates more than once every six months.

+ - Microsoft365.com and other start pages

+ - Microsoft 365 apps (Word, Excel, PowerPoint) on the web

+ - Microsoft 365 admin center

+The following Microsoft 365 apps are supported.

+- Microsoft365.com and other start pages

+- Microsoft 365 apps (Word, Excel, PowerPoint) on the web

+- Microsoft 365 admin center

+2. Uncheck **Turn on to set the period of inactivity for users to be signed off of Microsoft 365 apps** and select **Save**.

+|**Microsoft365.com**|Yes|Yes|Yes|Yes|

+To configure these policy settings, you can use the Cloud Policy service for Microsoft 365. For more information, see [Overview of the Cloud Policy service for Microsoft 365](/deployoffice/overview-office-cloud-policy-service). You can search for "feedback" or "survey" within the Cloud Policy service for Microsoft 365 UI to find the policy settings to configure them.

+**Channels** are a way for organizations to select how often they get feature updates for Microsoft 365. Learn more at [Overview of update channels for Microsoft 365 apps](/deployoffice/overview-update-channels). This filter allows you to filter down to feedback submitted from a user on a specific channel.

+3. Select **Allow Microsoft 365 content on the new tab page**. When enabled, users can customize their new tab to show information from Microsoft 365, including recommended and recent files, along with frequently used SharePoint sites and other information.

+- Ensure users in your organization have a valid license for a Microsoft 365 or Office 365 commercial or EDU plan that includes access to Microsoft 365 apps, such as one of the following plans:

+You can use controls in the Azure Active Directory portal to pin up to three apps to Microsoft365.com and the app launcher for all the users in your organization. You can also organize groups of applications. Any app you add can later be unpinned by the user at any time. To pin an app for your users, you must be a Cloud application administrator, or Application administrator in Azure Active Directory, or a Global administrator in Microsoft 365. For more information about admin roles, see [Azure AD built-in roles](/azure/active-directory/roles/permissions-reference) and [admin roles in Microsoft 365](../add-users/about-admin-roles.md).

+For more information about the app launcher and Microsoft365.com, see [meet the app launcher](https://support.microsoft.com/office/79f12104-6fed-442f-96a0-eb089a3f476a) and [updates to office.com and the-Office 365 app launcher](https://techcommunity.microsoft.com/t5/office-365-blog/updates-to-office-com-and-the-office-365-app-launcher/ba-p/1150503) blog article.

+3. In **Azure Active Directory**, choose **Enterprise applications** > **App launchers** > **Settings**.

+4. In the **Microsoft 365 settings** section, choose **Add application**.

+- You can [remove licenses from user accounts with Microsoft 365 PowerShell](../../enterprise/remove-licenses-from-user-accounts-with-microsoft-365-powershell.md).

+- If you remove a user's license and they still have Microsoft 365 apps installed, they see [Unlicensed Product and activation errors in Office](https://support.microsoft.com/office/0d23d3c0-c19c-4b2f-9845-5344fedc4380) when they use Microsoft 365 apps.

+- **Device exposure score is now visible in Microsoft 365 Lighthouse** (preview). Microsoft Cloud Solution Providers (CSPs) who are using [Microsoft 365 Lighthouse](../lighthouse/m365-lighthouse-overview.md) can now view and manage device exposure scores across customer tenants. These capabilities enable partners to discover which customers' devices are at risk because of vulnerabilities. See [Overview of the Vulnerability management page in Microsoft 365 Lighthouse](/microsoft-365/lighthouse/m365-lighthouse-vulnerability-management-page-overview).

+[What's new in Microsoft 365 Lighthouse](../lighthouse/m365-lighthouse-whats-new.md)

+To delete users, see [User management admin: Delete one or more users](../admin/add-users/delete-a-user.md#user-management-admin-delete-one-or-more-users-from-microsoft-365).

+SharePoint items that are in draft or that have never been published aren't supported for this scenario.

+|Sensitive info types | Yes | No |

+|Sensitive info types | Yes | Yes ^\* |

+**Footnote:**

+^\*

+Applies only to content that's already classified, which you can determine by using [content explorer](data-classification-content-explorer.md).

+> Only roll an encryption key that you use with Customer Key when your security or compliance requirements dictate that you must roll the key. **Do not delete or disable any keys that are or were associated with policies, including older versions of keys that you used.** When you roll your keys, there will be content encrypted with the previous keys. For example, while active mailboxes will be re-encrypted frequently, inactive, disconnected, and disabled mailboxes may still be encrypted with the previous keys. SharePoint Online performs backup of content for restore and recovery purposes, so there may still be archived content using older keys.

+ - If you're using Role-Based Access Control (RBAC) to assign `wrapKey`, `unwrapkey`, and `get` permissions, you must assign the ΓÇ£*Key Vault Crypto Service Encryption User*ΓÇ¥ role to the corresponding Microsoft 365 app. See [Grant permission to applications to access an Azure key vault using Azure RBAC | Microsoft Learn](/azure/key-vault/general/rbac-guide?tabs=azure-cli).

+> [!TIP]

+There are two ways to add keys to an Azure Key Vault; you can create a key directly in Key Vault, or you can import a key. Creating a key directly in Key Vault is less complicated, but importing a key provides total control over how the key is generated. Use the RSA keys. Customer Key supports RSA Key lengths up to 4096. Azure Key Vault doesn't support wrapping and unwrapping with elliptical curve keys.

+|**Disk space** |10-GB free space (average) for temporary files. </br></br>The scanner requires sufficient disk space to create temporary files for each file that it scans, four files per core. </br></br>The recommended disk space of 10 GB allows for 4 core processors scanning 16 files that each have a file size of 625 MB.|

+|**Operating system** |64-bit versions of: <br><br>- Windows Server 2022 </br>- Windows Server 2019 </br>- Windows Server 2016 </br>- Windows Server 2012 R2 </br></br>**Note**: For testing or evaluation purposes in a non-production environment, you can also use any Windows operating system that is [supported by the Azure Information Protection client](/azure/information-protection/requirements#client-devices).|

+|**- Network connectivity** | Your scanner computer can be a physical or virtual computer with a fast and reliable network connection to the data stores to be scanned. </br></br> If internet connectivity is not possible because of your organization policies, see [Deploying the scanner with alternative configurations](#deploying-the-scanner-with-alternative-configurations). </br></br>Otherwise, make sure that this computer has internet connectivity that allows the following URLs over HTTPS (port 443):</br><br />- \*.aadrm.com <br />- \*.azurerms.com<br />- \*.informationprotection.azure.com <br /> - informationprotection.hosting.portal.azure.net <br /> - \*.aria.microsoft.com <br />- \*.protection.outlook.com |

+description: Whether it be adding new solutions to the compliance portal, updating existing features based on your feedback, or rolling out fresh and updated documentation, Microsoft Purview helps you stay on top of the ever-changing compliance landscape. Find out what we've been up to this month.

+### Audit

+- Updates for *UserKey* and *UserType* schema values to address [scenarios](/microsoft-365/compliance/audit-log-detailed-properties#usertype-and-userkey-scenarios) for enumeration for audit records generated by guest users and to remove ambiguity for accepted data.

+- Updates for [audit search records and activities](/microsoft-365/compliance/audit-log-search) related to Microsoft Defender for Identity (MDI).

+- Updates for [new audit log fields](/microsoft-365/compliance/audit-log-detailed-properties) added to support Microsoft Information Protection.

+- Updates for across all [audit content](/microsoft-365/compliance/audit-solutions-overview) for new UTC support in audit solutions.

+- Updates for all [events that are logged](/microsoftteams/audit-log-events) for the **Updates app** activities in Teams in the audit log.

+- **New article**: Added article that includes a list of [best practices to help reduce alert "noise"](communication-compliance-alerts-best-practices.md).

+- **New article**: Added article that summarizes the [privacy principles for communication compliance](insider-risk-solution-privacy.md).

+### eDiscovery

+- Updates for [hold type values](/microsoft-365/compliance/ediscovery-identify-a-hold-on-an-exchange-online-mailbox#review-the-results-of-the-mailbox-diagnostics-logs) in the Mailbox diagnostic logs.

+- Clarifications for [self-chat messages support](/microsoftteams/ediscovery-investigation) in content search in Microsoft Teams.

+- [Updates](/microsoft-365/compliance/ediscovery-view-documents-in-review-set) for new **Add Notes** feature in viewing review sets and updates for the review set user experience.

+- Clarification for custom [sensitive information type requirement](/microsoft-365/compliance/ediscovery-keyword-queries-and-search-conditions) to use a GUID for search in eDiscovery.

+- Clarification for [excluding partially indexed items](/microsoft-365/compliance/ediscovery-partially-indexed-items-in-content-search) by using a date range in a search query.

+- New [clarification section](/microsoft-365/compliance/ediscovery-keyword-queries-and-search-conditions#searchable-sensitive-data-types) that that only Microsoft default sensitive information types are searchable by name, including new example.

+- New update for review set viewer and pagination [limits](/microsoft-365/compliance/ediscovery-premium-limits#review-set-viewer-limits).

+### Information barriers

+- **New article**: Added new article to support the [new multi-segment mode](/microsoft-365/compliance/information-barriers-multi-segment) in information barriers. The multi-segment mode enables you to assign users in your organization to up to 10 segments in information barriers instead of being limited to just one segment. This allows support for more diverse communication rules between individuals and groups to support more complex organizational and operational scenarios.

+- Clarifications for [hidden/disabled/guest user accounts](/microsoft-365/compliance/information-barriers-policies) and the *HiddenFromAddressListEnabled* parameter.

+- Updates for information barriers policy application and the background processor in [Microsoft Teams](/microsoftteams/information-barriers-in-teams#ib-policy-application-in-teams).

+- **New article**: Added article that [summarizes the privacy principles for insider risk management](insider-risk-solution-privacy.md).

+### Permissions

+- [Clarifications](/microsoft-365/compliance/microsoft-365-compliance-center-permissions) for role group support for security groups and blocked and unblocked groups.

+- **In preview**: The ability to [scope labels to files and emails](sensitivity-labels-office-apps.md#scope-labels-to-just-files-or-emails), so that, for example, a sensitivity label is visible to users in Outlook but not in Word, Excel, or PowerPoint. This configuration can be used as a parity feature for the AIP add-in, which could be disabled per app.

+- [Clarification that scoped admins can't select the quick setup option for Adaptive Protection](insider-risk-management-adaptive-protection.md#quick-setup)

+This topic describes deploying Defender for Endpoint on iOS on Microsoft Intune Company Portal enrolled devices. For more information about Microsoft Intune device enrollment, see [Enroll iOS/iPadOS devices in Intune](/mem/intune/enrollment/ios-enroll).

+1. Choose **Platform** as **iOS/iPadOS**, **Profile type** as **Templates** and **Template name** as **VPN**. Select **Create**.

+### Mar-2023 (Build: 101.98.30 | Release version: 20.123012.19830.0)

+| Build: | **101.98.30** |

+|--|--|

+| Release version: | **20.123012.19830.0** |

+| Engine version: | **1.1.20100.6** |

+| Signature version: | **1.385.924.0** |

+##### What's new

+- Bug and performance fixes

+Network Protection for macOS will soon be available for all Microsoft Defender for Endpoint onboarded macOS devices which meet the minimum requirements. Microsoft will begin incrementally rolling out the functionality for all macOS devices to enable Network Protection on 1/31/2023 with target completion, subject to change, in May 2023. When this feature rolls to production, all of your currently configured Network Protection and Web Threat Protection policies will be enforced on macOS devices where Network Protection is configured for block mode.

+1. Before applying the policy on a test device, open a PowerShell Window and type `Get-MpPreference`.

+> [!IMPORTANT]

+> Between March and May of 2023, Microsoft Defender for Endpoint on macOS will start respecting the selection for tamper protection applied via the global tamper protection switch under advanced settings in the Microsoft 365 Defender portal ([https://security.microsoft.com](https://security.microsoft.com)). You can choose to enforce (block/audit/disable) your own macOS tamper protection settings by using a Mobile Device Management (MDM) solution such as Intune or JAMF (recommended). If the tamper protection setting was not enforced via MDM, a local administrator can continue to manually change the setting with the following command: `sudo mdatp config tamper-protection enforcement-level --value (chosen mode)`.

+

+Use the following command:

+sudo mdatp config tamper-protection enforcement-level --value block

+```

+```bash

+mdatp health

+```

+```console

+healthy : true

+health_issues : []

+licensed : true

+engine_version : "1.1.19300.3"

+app_version : "101.70.19"

+org_id : "..."

+log_level : "info"

+machine_guid : "..."

+release_ring : "InsiderFast"

+product_expiration : Dec 29, 2022 at 09:48:37 PM

+cloud_enabled : true

+cloud_automatic_sample_submission_consent : "safe"

+cloud_diagnostic_enabled : false

+passive_mode_enabled : false

+real_time_protection_enabled : true

+real_time_protection_available : true

+real_time_protection_subsystem : "endpoint_security_extension"

+network_events_subsystem : "network_filter_extension"

+device_control_enforcement_level : "audit"

+tamper_protection : "block"

+automatic_definition_update_enabled : true

+definitions_updated : Jul 06, 2022 at 01:57:03 PM

+definitions_updated_minutes_ago : 5

+definitions_version : "1.369.896.0"

+definitions_status : "up_to_date"

+edr_early_preview_enabled : "disabled"

+edr_device_tags : []

+edr_group_ids : ""

+edr_configuration_version : "20.199999.main.2022.07.05.02-ac10b0623fd381e28133debe14b39bb2dc5b61af"

+edr_machine_id : "..."

+conflicting_applications : []

+network_protection_status : "stopped"

+data_loss_prevention_status : "disabled"

+full_disk_access_enabled : true

+```

+

+$ sudo grep -F '[{tamperProtection}]: Feature state:' /Library/Logs/Microsoft/mdatp/microsoft_defender_core.log | tail -n 1

+## Prerequisites

+Collaborating with external participants in a shared channel requires that guest access be turned on for SharePoint and Microsoft 365 Groups. These settings are enabled by default, but if your organization has made changes to them, confirm the following settings before configuring shared channels:

+- [Microsoft 365 Groups sharing settings](/microsoft-365/solutions/microsoft-365-guest-settings#microsoft-365-groups) must both be enabled.

+- SharePoint [organization level](/microsoft-365/solutions/microsoft-365-guest-settings#sharepoint-and-onedrive-organization-level) and [site level](/microsoft-365/solutions/microsoft-365-guest-settings#sharepoint-site-level) sharing settings must allow guests. The domains you're sharing with must not be blocked.