Microsoft 365 Lighthouse – One of the best kept “secrets”

Managed Service Providers often reach a point where?switching?between tenants for each client becomes?impractical and time-consuming. Additionally, there are several settings that are common across all clients, such as security baselines and endpoint configurations.

Various solutions can assist in this task, including?Remote Management and Monitoring (RMM) tools. However, if you aim to have a?highly consolidated Microsoft ecosystem, there is a solution launched by Microsoft in September 2020 that serves as an alternative to using another vendor for infrastructure management.

The?Microsoft 365 Lighthouse?aims to?aggregate all the tenants?we manage into a single console and combine it with the telemetry data we have already collected. Notable features include:

1. Step-by-Step Implementation in Tenants?to achieve consistent configuration across various clients.
2. Default Security Baselines?that include specific security best practices for small and medium-sized businesses.
3. Multi-Tenant Compliance Information?for all onboarded devices, covering implemented configurations and any inconsistencies that may exist between tenants.
4. Simple Management Tasks, such as password resets, user creation, and deletion.
5. Implementation of Multi-Factor Authentication?and?Self-Service Password Reset (SSPR)?across all tenants, including tools to facilitate user adoption of these technologies.
6. Monitoring of Risky Sign-Ins.
7. Security Monitoring for Various Devices, leveraging telemetry and detections from Microsoft Defender XDR, with the ability to take mitigation actions and troubleshoot threats.
8. Aggregated Service Health Information?for various Microsoft services.

These are just?some of the features?that?Microsoft 365 Lighthouse?offers.?Many more?are on the way and being implemented every month.

Regarding the?prerequisites?for using the product:

·?????? Enrollment in Microsoft Cloud Solution Provider (CSP) This applies only to those who manage it. Customer tenants do not need to be enrolled.

·?????? Device Management:

• Devices should be?enrolled in Microsoft Intune.
• Apply at least one compliance policy to all devices

·?????? Threat Management:

• Devices must be?protected with Microsoft Defender for Endpoint / AV.

While it may not currently be the?best management solution?in the market, it does provide?a zero-cost visibility?and effective management of all the tenants we handle. It avoids the constant switching between browser windows and different administration websites for various Microsoft 365 modules.

You can find more information about this solution?here.

Now, over to you! Were you already familiar with this solution? Do you think it enhances your day-to-day operations?

#Microsoft #ManagedServices #Code495Solutions

Written by: Diogo Sousa