|
37 | 37 | {
|
38 | 38 | "name": "standards.AuditLog",
|
39 | 39 | "cat": "Global Standards",
|
40 |
| - "helpText": "Enables the Unified Audit Log for tracking and auditing activities; also runs Enable-OrganizationCustomization if necessary.", |
| 40 | + "helpText": "Enables the Unified Audit Log for tracking and auditing activities. Also runs Enable-OrganizationCustomization if necessary.", |
41 | 41 | "addedComponent": [],
|
42 | 42 | "label": "Enable the Unified Audit Log",
|
43 | 43 | "impact": "Low Impact",
|
44 | 44 | "impactColour": "info"
|
45 | 45 | },
|
| 46 | + { |
| 47 | + "name": "standards.PhishProtection", |
| 48 | + "cat": "Global Standards", |
| 49 | + "helpText": "Adds branding to the logon page that only appears if the url is not login.microsoftonline.com. This potentially prevents AITM attacks via EvilNginx. This will also automatically generate alerts if a clone of your login page has been found. (P1 or higher required)", |
| 50 | + "addedComponent": [], |
| 51 | + "label": "Enable Phishing Protection system via branding CSS", |
| 52 | + "impact": "Low Impact", |
| 53 | + "impactColour": "info" |
| 54 | + }, |
| 55 | + { |
| 56 | + "name": "standards.EnableCustomerLockbox", |
| 57 | + "cat": "Global Standards", |
| 58 | + "helpText": "Enables Customer Lockbox that offers an approval process for Microsoft support to access organization data", |
| 59 | + "addedComponent": [], |
| 60 | + "label": "Enable Customer Lockbox", |
| 61 | + "impact": "Low Impact", |
| 62 | + "impactColour": "info" |
| 63 | + }, |
46 | 64 | {
|
47 | 65 | "name": "standards.AnonReportDisable",
|
48 | 66 | "cat": "Global Standards",
|
|
55 | 73 | {
|
56 | 74 | "name": "standards.DisableGuestDirectory",
|
57 | 75 | "cat": "Global Standards",
|
58 |
| - "helpText": "Disables Guest access to enumerate directory objects. This prevents guest users from see other users or guests in the directory.", |
| 76 | + "helpText": "Disables Guest access to enumerate directory objects. This prevents guest users from seeing other users or guests in the directory.", |
59 | 77 | "addedComponent": [],
|
60 | 78 | "label": "Restrict guest user access to directory objects",
|
61 | 79 | "impact": "Low Impact",
|
|
64 | 82 | {
|
65 | 83 | "name": "standards.DisableBasicAuthSMTP",
|
66 | 84 | "cat": "Global Standards",
|
67 |
| - "helpText": "Disables SMTP AUTH for the organization. This is the default for new tenants. Sets the entire tenant to no longer allow SMTP AUTH, and as such has no exclusions.", |
| 85 | + "helpText": "Disables SMTP AUTH for the organization and all users. This is the default for new tenants. ", |
68 | 86 | "addedComponent": [],
|
69 | 87 | "label": "Disable SMTP Basic Authentication",
|
70 | 88 | "impact": "Medium Impact",
|
|
84 | 102 | "cat": "Entra (AAD) Standards",
|
85 | 103 | "helpText": "Enables the tenant to use LAPS. You must still create a policy for LAPS to be active on all devices. Use the template standards to deploy this by default.",
|
86 | 104 | "addedComponent": [],
|
87 |
| - "label": "Enable LAPs on the tenant", |
| 105 | + "label": "Enable LAPS on the tenant", |
88 | 106 | "impact": "Low Impact",
|
89 | 107 | "impactColour": "info"
|
90 | 108 | },
|
|
102 | 120 | "name": "standards.allowOTPTokens",
|
103 | 121 | "helpText": "Allows you to use MS authenticator OTP token generator",
|
104 | 122 | "addedComponent": [],
|
105 |
| - "label": "Enable OTP via Authenticator.", |
| 123 | + "label": "Enable OTP via Authenticator", |
106 | 124 | "impact": "Low Impact",
|
107 | 125 | "impactColour": "info"
|
108 | 126 | },
|
|
221 | 239 | "name": "standards.NudgeMFA.enable",
|
222 | 240 | "helpText": "Enables registration campaign for the tenant",
|
223 | 241 | "addedComponent": [],
|
224 |
| - "label": "Request to setup Authenticator if not setup yet.", |
| 242 | + "label": "Request to setup Authenticator if not setup yet", |
225 | 243 | "impact": "Low Impact",
|
226 | 244 | "impactColour": "info"
|
227 | 245 | },
|
|
230 | 248 | "name": "standards.NudgeMFA.disable",
|
231 | 249 | "helpText": "Disables registration campaign for the tenant",
|
232 | 250 | "addedComponent": [],
|
233 |
| - "label": "Disables the request to setup Authenticator if setup.", |
| 251 | + "label": "Disables the request to setup Authenticator if setup", |
234 | 252 | "impact": "Low Impact",
|
235 | 253 | "impactColour": "info"
|
236 | 254 | },
|
|
290 | 308 | "label": "Allowed application IDs, comma separated"
|
291 | 309 | }
|
292 | 310 | ],
|
293 |
| - "label": "Require admin consent for applications (Prevent OAuth phishing.)", |
294 |
| - "impact": "Medium impact", |
| 311 | + "label": "Require admin consent for applications (Prevent OAuth phishing)", |
| 312 | + "impact": "Medium Impact", |
295 | 313 | "impactColour": "warning"
|
296 | 314 | },
|
297 | 315 | {
|
298 | 316 | "cat": "Entra (AAD) Standards",
|
299 | 317 | "name": "standards.OauthConsentLowSec",
|
300 | 318 | "helpText": "Sets the default oauth consent level so users can consent to applications that have low risks.",
|
301 |
| - "label": "Allow users to consent to applications with low security risk (Prevent OAuth phishing. Lower impact, less secure.)", |
302 |
| - "impact": "Medium impact", |
| 319 | + "label": "Allow users to consent to applications with low security risk (Prevent OAuth phishing. Lower impact, less secure)", |
| 320 | + "impact": "Medium Impact", |
303 | 321 | "impactColour": "warning"
|
304 | 322 | },
|
305 | 323 | {
|
|
364 | 382 | {
|
365 | 383 | "name": "standards.OutBoundSpamAlert",
|
366 | 384 | "cat": "Exchange Standards",
|
367 |
| - "helpText": "Set the Outbound Spam Alert e-mail address.", |
| 385 | + "helpText": "Set the Outbound Spam Alert e-mail address", |
368 | 386 | "addedComponent": [
|
369 | 387 | {
|
370 | 388 | "type": "input",
|
|
406 | 424 | ]
|
407 | 425 | }
|
408 | 426 | ],
|
409 |
| - "label": "Enable or disable 'external' warning in Outlook.", |
| 427 | + "label": "Enable or disable 'external' warning in Outlook", |
| 428 | + "impact": "Low Impact", |
| 429 | + "impactColour": "info" |
| 430 | + }, |
| 431 | + { |
| 432 | + "name": "standards.EnableMailTips", |
| 433 | + "cat": "Exchange Standards", |
| 434 | + "helpText": "Enables all MailTips in Outlook. MailTips are the notifications Outlook and Outlook on the web shows when an email you create, meets some requirements", |
| 435 | + "addedComponent": [ |
| 436 | + { |
| 437 | + "type": "number", |
| 438 | + "name": "standards.EnableMailTips.MailTipsLargeAudienceThreshold", |
| 439 | + "label": "Number of recipients to trigger the large audience MailTip (Default is 25)", |
| 440 | + "placeholder": "Enter a profile name" |
| 441 | + } |
| 442 | + ], |
| 443 | + "label": "Enable all MailTips", |
410 | 444 | "impact": "Low Impact",
|
411 | 445 | "impactColour": "info"
|
412 | 446 | },
|
|
437 | 471 | "impact": "Low Impact",
|
438 | 472 | "impactColour": "info"
|
439 | 473 | },
|
| 474 | + { |
| 475 | + "name": "standards.EnableMailboxAuditing", |
| 476 | + "cat": "Exchange Standards", |
| 477 | + "helpText": "Enables Mailbox auditing for all mailboxes and on tenant level. By default Microsoft does not enable mailbox auditing for Resource Mailboxes, Public Folder Mailboxes and DiscoverySearch Mailboxes. Unified Audit Log needs to be enabled for this standard to function.", |
| 478 | + "addedComponent": [], |
| 479 | + "label": "Enable Mailbox auditing", |
| 480 | + "impact": "Low Impact", |
| 481 | + "impactColour": "info" |
| 482 | + }, |
440 | 483 | {
|
441 | 484 | "name": "standards.SendReceiveLimitTenant",
|
442 | 485 | "cat": "Exchange Standards",
|
443 |
| - "helpText": "Sets the Send and Receive limits for new users. Valid values are 1KB to 150MB. Invalid values will be set to EXO standard of 35MB,36MB", |
| 486 | + "helpText": "Sets the Send and Receive limits for new users. Valid values are 1MB to 150MB", |
444 | 487 | "addedComponent": [
|
445 | 488 | {
|
446 | 489 | "type": "number",
|
447 | 490 | "name": "standards.SendReceiveLimitTenant.SendLimit",
|
448 |
| - "label": "Send limit in MB" |
| 491 | + "label": "Send limit in MB (Default is 35)" |
449 | 492 | },
|
450 | 493 | {
|
451 | 494 | "type": "number",
|
452 | 495 | "name": "standards.SendReceiveLimitTenant.ReceiveLimit",
|
453 |
| - "label": "Receive Limit in MB" |
| 496 | + "label": "Receive Limit in MB (Default is 36)" |
454 | 497 | }
|
455 | 498 | ],
|
456 | 499 | "label": "Set send/receive size limits",
|
|
507 | 550 | "impact": "Low Impact",
|
508 | 551 | "impactColour": "info"
|
509 | 552 | },
|
| 553 | + { |
| 554 | + "name": "standards.DisableExternalCalendarSharing", |
| 555 | + "cat": "Exchange Standards", |
| 556 | + "helpText": "Disables the ability for users to share their calendar with external users. Only for the default policy, so exclusions can be made if needed.", |
| 557 | + "addedComponent": [], |
| 558 | + "label": "Disable external calendar sharing", |
| 559 | + "impact": "Low Impact", |
| 560 | + "impactColour": "info" |
| 561 | + }, |
| 562 | + { |
| 563 | + "name": "standards.DisableAdditionalStorageProviders", |
| 564 | + "cat": "Exchange Standards", |
| 565 | + "helpText": "Disables the ability for users to open files in Outlook on the Web, from other providers such as Box, Dropbox, Facebook, Google Drive, OneDrive Personal, etc.", |
| 566 | + "addedComponent": [], |
| 567 | + "label": "Disable additional storage providers in OWA", |
| 568 | + "impact": "Low Impact", |
| 569 | + "impactColour": "info" |
| 570 | + }, |
510 | 571 | {
|
511 | 572 | "name": "standards.SafeSendersDisable",
|
512 | 573 | "cat": "Exchange Standards",
|
|
616 | 677 | {
|
617 | 678 | "name": "standards.DisableAddShortcutsToOneDrive",
|
618 | 679 | "cat": "SharePoint Standards",
|
619 |
| - "helpText": "When the feature is disabled the option Add shortcut to My files will be removed; any folders that have already been added will remain on the user's computer.", |
| 680 | + "helpText": "When the feature is disabled the option Add shortcut to OneDrive will be removed. Any folders that have already been added will remain on the user's computer.", |
620 | 681 | "disabledFeatures": {
|
621 | 682 | "report": true,
|
622 | 683 | "warn": true,
|
|
0 commit comments