Off by default, valuable on
Microsoft's April update added several protections that ship disabled. Enabling them takes minutes and closes real gaps.
The five to enable
- Stronger default Conditional Access templates
- Expanded Safe Links coverage for Teams
- Tighter external sharing defaults in SharePoint/OneDrive
- Improved token-protection signals
- Better admin alerting for risky sign-ins