Microsoft 365 license inventory, account health, MFA status, and backup coverage. MFA is enforced tenant-wide through Microsoft Security Defaults. Microsoft 365 backups run daily through Datto SaaS Protection, included in your managed services.
| Account | License | MFA | Account Type | Notes |
|---|---|---|---|---|
| joshua@middleforklogistics.biz | Microsoft 365 Business Standard | Security Defaults | User | President |
| roger@middleforkinc.com | Microsoft 365 Business Standard | Security Defaults | User | General Manager |
| zoe@middleforklogistics.biz | Microsoft 365 Business Standard + Power Automate Free | Security Defaults | User | |
| admin@middleforkinc.com | Microsoft 365 Business Standard + Power Automate Free | Security Defaults | Department account | Operations Assistant |
| accounting@middleforklogistics.biz | Microsoft 365 Business Standard + Power Automate Free | Security Defaults | Department account | Accounting |
| operations@middleforklogistics.biz | Microsoft 365 Business Standard + Power Automate Free | Security Defaults | Department account | Operations |
| projects@middleforklogistics.biz | Microsoft 365 Business Standard | Security Defaults | Department account | Project Management |
| shop@middleforklogistics.biz | Microsoft 365 Business Standard | Security Defaults | Department account | Maintenance |
| Account | License | MFA | Account Type | Notes |
|---|---|---|---|---|
| info@middleforkinc.com | Unlicensed (shared mailbox) | Shared | Shared Mailbox | Middle Fork Inc. general mailbox. Sign-in enabled, recommend blocking. |
| hr@middleforkinc.com | Unlicensed (shared mailbox) | Shared | Shared Mailbox | HR mailbox. Sign-in enabled, recommend blocking. |
| dispatch@middleforkinc.com | Unlicensed (shared mailbox) | Shared | Shared Mailbox | Dispatch mailbox. Sign-in enabled, recommend blocking. |
| Account | License | MFA | Account Type | Notes |
|---|---|---|---|---|
| vicinity@middleforklogistics.biz | Unlicensed | Security Defaults | Vicinity Support Account | Vicinity administration and support |
| vicinityrs@middleforklogistics.biz | Unlicensed | Security Defaults | Vicinity Support Account | Vicinity remote support |
| Account | License | MFA | Account Type | Notes |
|---|---|---|---|---|
| jim@middleforklogistics.biz | Power Automate Free | Security Defaults | User | New account for the Strategy Consultant. No Microsoft 365 license assigned yet. |
| mflguest@middleforklogistics.biz | Unlicensed | Security Defaults | Generic login | Purpose to be confirmed. Review the need for this account. |
| External guest (Gmail) | Unlicensed | External | External guest | Added August 2026. Purpose to be confirmed. Remove if not needed. |
| External guest (go-big.com) | Unlicensed | External | External guest | Earlier guest access for the Strategy Consultant, now replaced by an internal account. |
Current state of collaboration and mail configuration.
| Area | Current State | Observation |
|---|---|---|
| Email domains | middleforklogistics.biz and middleforkinc.com are both used for addresses | Address formats are inconsistent. A standard scheme with aliases on both domains is recommended. |
| Microsoft 365 Groups | 10 groups | Several overlap in purpose and naming. |
| Microsoft Teams | 7 Teams, 2 of them public | Names overlap (Middle Fork, Middle Fork Inc., MFI Office, Middle Fork Logistics). Membership and purpose should be reviewed. |
| SharePoint | 11 sites, largest at 0.18 GB | Lightly used. Includes legacy and unattached sites that can be consolidated or retired. |
| Distribution lists and mail-enabled security groups | None configured | Security groups are recommended to control access to Teams and SharePoint. |
| External sharing and public folders | No organization sharing, no Exchange public folders | No action needed today. Review sharing policy during the project. |
| Teams voice | Not set up | No change needed. Phones run on Verizon One Talk. |
Entra ID and device state, with the controls available on the current license.
| Area | Current State | Gap |
|---|---|---|
| Licensing | Microsoft 365 Business Standard, Entra ID Free | No Conditional Access, Intune, or Defender for Office 365. |
| MFA | Security Defaults enabled tenant-wide | Baseline protection that cannot be tailored by user, location or device. |
| Directory | 17 accounts (15 internal, 2 external guests) | Includes shared mailbox logins, generic logins and unlicensed accounts. |
| Devices | 19 registered devices in Entra ID | Not managed through Intune. Several have not signed in for months or years. |
| Microsoft Secure Score | 41.2% (110 of 267 points). Identity 75.4%, Apps 32.5%, Data 0% | Most open actions are email threat protections that come with Business Premium. |
| Tenant contact | Technical contact is a personal email address | Update to a company or Vicinity contact. |
A proposed project to finish setting up and optimize your Microsoft 365 environment. If you would like to explore it, Vicinity will provide a statement of work and quote.
17 directory accounts and 19 registered devices, including stale devices, guest accounts, generic logins, and shared mailbox sign-ins.
Entra ID holds only current, active user and device accounts. Shared mailbox sign-ins are blocked and unneeded guests are removed.
Business Standard with Entra ID Free. No Conditional Access, Intune, or advanced email protection.
Business Premium unlocks Conditional Access, Intune device management, and Defender for Office 365 (Safe Links, Safe Attachments, impersonation protection).
Two domains in use with inconsistent address formats across users and department accounts.
Every user has a properly configured mailbox and address. Both domains are set up with a standard scheme and aliases where they make sense.
10 groups, 7 Teams and 11 SharePoint sites with overlapping names and unclear membership.
Every user is in the right user and security groups with appropriate access to Teams and SharePoint. Overlapping teams and legacy sites are consolidated or retired.
Devices are registered but not managed through Intune. MFA relies on baseline Security Defaults.
Company devices are enrolled with baseline policies. Conditional Access enforces MFA. Microsoft Secure Score improves measurably.
- Review the M365 optimization project. It addresses cleanup, licensing, access, and security in one coordinated effort.
- Plan the move to Business Premium as part of the project. It unlocks the security and management features this tenant is missing.
- Agree on an email address standard for both domains. This decision drives the account and alias work.