Microsoft 365 tenant default settings are not secure: according to the CIS benchmark, over 100 of them need to be changed. In two hours, Above IT will go through the portal to show which settings in your tenant should be fixed and why!
Thursday, December 3, 2026, from 1:00 PM to 3:00 PM
Above IT offers free training
In December 2026, we are hosting a free technical training webinar on Microsoft 365 tenant default settings and their security risks.
A new Microsoft 365 tenant is not secure by default. The CIS Microsoft 365 Foundations Benchmark includes 160 security recommendations, and over 100 of them require changes to Microsoft’s default settings. Many of these settings have remained untouched even in tenants that have been in production for years.
There will be no slides in this training. For two hours, we will go through the settings at a fast pace directly in the Microsoft administration portals. For each setting, we will show where it is, what its default value is, why the default value is a problem, and what the setting should be changed to.
The training is aimed at IT administrators and security experts who want to know which default settings expose the organization to attacks and how to get the tenant in order in a controlled manner without disrupting users’ daily work. For example, did you know that by default:
- Any user can create a new Entra tenant and become its administrator
- A device with no compliance policy assigned is marked as compliant and passes through Conditional Access
- The Global Admin role is added as a local administrator to every Entra-joined machine
- Shared mailbox user accounts are enabled, and they can be logged into once a password is set for the account
- Direct Send allows messages that appear to come from your own domain to reach your users without authentication
- Personal Teams accounts can start chats with your users, and trial tenants can communicate with your organization
- Device code login is not blocked, even though it is increasingly used in phishing attacks
After the training, you will know which settings to fix first, which changes affect users, and which require additional licenses. You can open your own tenant portal and start the fixes immediately.
What, Where, When?
For Whom: Administrators of Microsoft 365 environments, security experts, and those responsible for IT management in organizations
What: Issues with Over 100 Default Settings in Microsoft 365 Tenants
When: Thursday, December 3, 2026, starting at 1:00 PM (duration approximately 2 hours)
Where: Online, Teams Webinar (Note: participant names are visible to other participants)
Trainer: Above IT Oy’s ‘consigliere’ and partner Matias Haapaniemi
Participation: The training will be held in Finnish. Participants need a browser, headphones, and a microphone. Time is reserved for questions.
Registration: After pre-registering, you will receive a personal participation link in your email.
About the Trainer
The trainer is Above IT Oy’s Consigliere & Partner and Microsoft 365 security expert Matias Haapaniemi. At Above IT, Matias is responsible for endpoint management and security entities. He has worked with cloud environments since 2019. In his previous roles, he has built Microsoft 365 service products based on the CIS framework, audited customer environments, and maintained over 1,000 tenants. Therefore, he knows which default settings remain unfixed in real-world environments.
Matias specializes in Entra ID, Conditional Access, Intune, Defender XDR, and Sentinel. Additionally, he automates tenant maintenance using PowerShell, Microsoft Graph, and Azure Functions. In his free time, Matias can be found testing Microsoft’s new cloud features before their release and reporting on them to Microsoft through the Customer Connection Program.
He holds 17 active Microsoft certifications, including:
- Microsoft 365 Certified: Enterprise Administrator Expert
- Microsoft Cybersecurity Architect (SC-100)
- Security Operations Analyst (SC-200)
- Identity and Access Administrator (SC-300)
- Information Protection and Compliance Administrator (SC-400)
- Azure Security Engineer (AZ-500)
About our company
Above IT Oy is a partner and resource for IT management—a Finnish consulting firm that helps organizations get more out of Microsoft cloud services. We support IT management in environment administration and security development, and act as a modern work change consultant and trainer, making daily life smoother for end users.
And since not everyone is an IT expert for whom this technical training is intended, you can use the link below to book a short discussion to assess the security status of your Microsoft 365 environment with our professionals!
