{"id":1829,"date":"2023-06-07T09:01:12","date_gmt":"2023-06-07T00:01:12","guid":{"rendered":"https:\/\/m365jp.xyz\/?p=1829"},"modified":"2023-06-07T09:06:20","modified_gmt":"2023-06-07T00:06:20","slug":"mc574388-microsoft-secure-score-is-adding-new-improvement-actions","status":"publish","type":"post","link":"https:\/\/m365jp.net\/index.php\/2023-06-07-mc574388-microsoft-secure-score-is-adding-new-improvement-actions","title":{"rendered":"MC574388 | Microsoft Secure Score is Adding New Improvement Actions"},"content":{"rendered":"
\n
\n
\n\n\n\n
MC574388 | Microsoft Secure Score is Adding New Improvement Actions<\/th>\n<\/tr>\n<\/tbody>\n<\/table>\n
\n\n\n\n\n\n\n\n\n
Classification<\/th>\nstayInformed<\/td>\n<\/tr>\n
Last Updated<\/th>\n06\/06\/2023 23:20:26<\/td>\n<\/tr>\n
Start Time<\/th>\n06\/06\/2023 23:20:18<\/td>\n<\/tr>\n
End Time<\/th>\n07\/31\/2023 07:00:00<\/td>\n<\/tr>\n
Message Content<\/th>\n\n

We are updating Microsoft Secure Score improvement actions to ensure a more accurate representation of security posture.<\/p>\n

[When this will happen:]<\/p>\n

Rollout will begin in mid-June 2023 and is expected to be complete by late June 2023.<\/p>\n

[How this will affect your organization:] <\/p>\n

The following Microsoft Defender for Identity recommendations will be added as Microsoft Secure Score improvement actions: <\/p>\n

    \n
  • Recommend customers without an active workspace and reporting sensors to start the onboarding <\/li>\n
  • Accounts with password set to never expire<\/li>\n
  • Suspicious accounts with Admin SDHolder permission<\/li>\n
  • Accounts with password older than 180 days<\/li>\n
  • Non-admin accounts with DCSync permissions<\/li>\n
  • Local admins on identity assets<\/li>\n<\/ul>\n

    The following existing Microsoft Defender for Identity recommendations has been updated: <\/p>\n

      \n
    • Resolve unsecure account attributes – added the \u2018SPN Set\u2019 attribute has unsecure account attribute. <\/li>\n
    • Remove dormant accounts from sensitive groups – dormant account now defined as account who didn\u2019t perform logon activity for more than 90 days (was 180).<\/li>\n<\/ul>\n

      The following new Microsoft Information Protection recommendation will be added as Microsoft Secure Score improvement action: <\/p>\n

        \n
      • Ensure Microsoft 365 audit log search is enabled<\/li>\n<\/ul>\n

        The following new Exchange Online recommendation will be added as Microsoft Secure Score improvement actions: <\/p>\n

          \n
        • Ensure modern authentication for Exchange Online is enabled <\/li>\n
        • Ensure MailTips are enabled for end users <\/li>\n<\/ul>\n

          The following new Azure Active Directory recommendations will be added as Microsoft Secure Score improvement actions: <\/p>\n

            \n
          • Ensure that password protection is enabled for Active Directory <\/li>\n
          • Ensure that LinkedIn contact synchronization is disabled <\/li>\n<\/ul>\n

            In order to view those new controls, Office 365 connector in Microsoft defender for cloud apps must be toggled on via the App connectors settings page.<\/p>\n

            The following SharePoint new recommendations will be added as Microsoft Secure Score improvement actions: <\/p>\n

              \n
            • Block OneDrive for Business sync from unmanaged devices <\/li>\n
            • Ensure document sharing is being controlled by domains with whitelist or blacklist <\/li>\n<\/ul>\n

              In order to view those new controls, Office 365 connector in Microsoft defender for cloud apps must be toggled on via the App connectors settings page. <\/p>\n

              The following Google workspace recommendation will be added as Microsoft Secure Score improvement actions: <\/p>\n

                \n
              • Enable multi-factor authentication (MFA) <\/li>\n<\/ul>\n

                In order to view this new control, Google workspace connector in Microsoft defender for cloud apps must be configured via the App connectors settings page.<\/p>\n

                We have updated the Secure Score improvement action for the following Microsoft Defender for Office 365 recommendation: <\/p>\n

                  \n
                • Set action to take on bulk spam detection -Currently, you receive points by configuring this recommendation and choosing the action “MoveToJMF”. From today, you’ll also receive points when you choose the “Quarantine” action. <\/li>\n<\/ul>\n

                  [What you need to do to prepare:]<\/p>\n

                  There’s no action needed to prepare for this change, your score will be updated accordingly. Microsoft recommends reviewing the improvement actions listed in Microsoft Secure Score. <\/p>\n<\/td>\n<\/tr>\n

Machine Translation<\/th>\n\n

\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u4f53\u5236\u3092\u3088\u308a\u6b63\u78ba\u306b\u8868\u73fe\u3059\u308b\u305f\u3081\u306b\u3001Microsoft \u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 \u30b9\u30b3\u30a2\u306e\u6539\u5584\u30a2\u30af\u30b7\u30e7\u30f3\u3092\u66f4\u65b0\u3057\u3066\u3044\u307e\u3059\u3002<\/p>\n

[\u3053\u308c\u304c\u8d77\u3053\u308b\u3068\u304d:]<\/p>\n

\u30ed\u30fc\u30eb\u30a2\u30a6\u30c8\u306f2023\u5e746\u6708\u4e2d\u65ec\u306b\u958b\u59cb\u3055\u308c\u30012023\u5e746\u6708\u4e0b\u65ec\u307e\u3067\u306b\u5b8c\u4e86\u3059\u308b\u4e88\u5b9a\u3067\u3059\u3002<\/p>\n

[\u3053\u308c\u304c\u7d44\u7e54\u306b\u4e0e\u3048\u308b\u5f71\u97ff:]<\/p>\n

\u6b21\u306e Microsoft Defender for Identity \u306e\u63a8\u5968\u4e8b\u9805\u306f\u3001\u30de\u30a4\u30af\u30ed\u30bd\u30d5\u30c8\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 \u30b9\u30b3\u30a2\u5411\u4e0a\u30a2\u30af\u30b7\u30e7\u30f3\u3068\u3057\u3066\u8ffd\u52a0\u3055\u308c\u307e\u3059\u3002 <\/p>\n

    \n
  • \u30a2\u30af\u30c6\u30a3\u30d6\u306a\u30ef\u30fc\u30af\u30b9\u30da\u30fc\u30b9\u304c\u306a\u304f\u3001\u30bb\u30f3\u30b5\u30fc\u3092\u5831\u544a\u3057\u3066\u3044\u306a\u3044\u9867\u5ba2\u306b\u30aa\u30f3\u30dc\u30fc\u30c7\u30a3\u30f3\u30b0 \u3092\u958b\u59cb\u3059\u308b\u3088\u3046\u306b\u52e7\u3081\u308b<\/li>\n
  • \u30d1\u30b9\u30ef\u30fc\u30c9\u3092\u7121\u671f\u9650\u306b\u8a2d\u5b9a\u3057\u305f\u30a2\u30ab\u30a6\u30f3\u30c8<\/li>\n
  • \u7ba1\u7406\u8005 SDHolder \u6a29\u9650\u3092\u6301\u3064\u4e0d\u5be9\u306a\u30a2\u30ab\u30a6\u30f3\u30c8<\/li>\n
  • \u30d1\u30b9\u30ef\u30fc\u30c9\u304c 180 \u65e5\u4ee5\u4e0a\u7d4c\u904e\u3057\u3066\u3044\u308b\u30a2\u30ab\u30a6\u30f3\u30c8<\/li>\n
  • DCSync \u30a2\u30af\u30bb\u30b9\u8a31\u53ef\u3092\u6301\u3064\u7ba1\u7406\u8005\u4ee5\u5916\u306e\u30a2\u30ab\u30a6\u30f3\u30c8<\/li>\n
  • \u30a2\u30a4\u30c7\u30f3\u30c6\u30a3\u30c6\u30a3\u8cc7\u7523\u306e\u30ed\u30fc\u30ab\u30eb\u7ba1\u7406\u8005<\/li>\n<\/ul>\n

    \u6b21\u306e\u65e2\u5b58\u306e Microsoft Defender for Identity \u306e\u63a8\u5968\u4e8b\u9805\u304c\u66f4\u65b0\u3055\u308c\u307e\u3057\u305f\u3002 <\/p>\n

      \n
    • \u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u3067\u4fdd\u8b77\u3055\u308c\u3066\u3044\u306a\u3044\u30a2\u30ab\u30a6\u30f3\u30c8\u5c5e\u6027\u3092\u89e3\u6c7a\u3059\u308b – ‘SPN Set’ \u5c5e\u6027\u306b\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u3067\u4fdd\u8b77\u3055\u308c\u3066\u3044\u306a\u3044\u30a2\u30ab\u30a6\u30f3\u30c8\u5c5e\u6027\u304c\u8ffd\u52a0\u3055\u308c\u307e\u3057\u305f\u3002<\/li>\n
    • \u6a5f\u5bc6\u6027\u306e\u9ad8\u3044\u30b0\u30eb\u30fc\u30d7\u304b\u3089\u4f11\u7720\u30a2\u30ab\u30a6\u30f3\u30c8\u3092\u524a\u9664\u3059\u308b – \u4f11\u7720\u30a2\u30ab\u30a6\u30f3\u30c8\u306f\u300190 \u65e5\u3092\u8d85\u3048\u3066\u30ed\u30b0\u30aa\u30f3 \u30a2\u30af\u30c6\u30a3\u30d3\u30c6\u30a3\u3092\u5b9f\u884c\u3057\u306a\u304b\u3063\u305f\u30a2\u30ab\u30a6\u30f3\u30c8\u3068\u3057\u3066\u5b9a\u7fa9\u3055\u308c\u308b\u3088\u3046\u306b\u306a\u308a\u307e\u3057\u305f (180 \u3067\u3057\u305f)\u3002<\/li>\n<\/ul>\n

      \u6b21\u306e\u65b0\u3057\u3044 Microsoft \u60c5\u5831\u4fdd\u8b77\u306e\u63a8\u5968\u4e8b\u9805\u306f\u3001Microsoft \u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 \u30b9\u30b3\u30a2\u5411\u4e0a\u30a2\u30af\u30b7\u30e7\u30f3\u3068\u3057\u3066\u8ffd\u52a0\u3055\u308c\u307e\u3059\u3002<\/p>\n

        \n
      • Microsoft 365 \u76e3\u67fb\u30ed\u30b0\u306e\u691c\u7d22\u304c\u6709\u52b9\u306b\u306a\u3063\u3066\u3044\u308b\u3053\u3068\u3092\u78ba\u8a8d\u3059\u308b<\/li>\n<\/ul>\n

        \u6b21\u306e\u65b0\u3057\u3044 Exchange Online \u63a8\u5968\u4e8b\u9805\u306f\u3001\u30de\u30a4\u30af\u30ed\u30bd\u30d5\u30c8\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 \u30b9\u30b3\u30a2\u5411\u4e0a\u30a2\u30af\u30b7\u30e7\u30f3\u3068\u3057\u3066\u8ffd\u52a0\u3055\u308c\u307e\u3059\u3002 <\/p>\n

          \n
        • Exchange Online \u306e\u5148\u9032\u8a8d\u8a3c\u304c\u6709\u52b9\u306b\u306a\u3063\u3066\u3044\u308b\u3053\u3068\u3092\u78ba\u8a8d\u3059\u308b<\/li>\n
        • \u30e1\u30fc\u30eb \u30d2\u30f3\u30c8\u304c\u30a8\u30f3\u30c9 \u30e6\u30fc\u30b6\u30fc\u306b\u5bfe\u3057\u3066\u6709\u52b9\u306b\u306a\u3063\u3066\u3044\u308b\u3053\u3068\u3092\u78ba\u8a8d\u3059\u308b<\/li>\n<\/ul>\n

          \u6b21\u306e\u65b0\u3057\u3044 Azure Active Directory \u306e\u63a8\u5968\u4e8b\u9805\u304c\u3001Microsoft \u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 \u30b9\u30b3\u30a2\u306e\u6539\u5584\u30a2\u30af\u30b7\u30e7\u30f3\u3068\u3057\u3066\u8ffd\u52a0\u3055\u308c\u307e\u3059\u3002 <\/p>\n

            \n
          • \u30d1\u30b9\u30ef\u30fc\u30c9\u4fdd\u8b77\u304c\u30a2\u30af\u30c6\u30a3\u30d6\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u306b\u5bfe\u3057\u3066\u6709\u52b9\u306b\u306a\u3063\u3066\u3044\u308b\u3053\u3068\u3092\u78ba\u8a8d\u3059\u308b<\/li>\n
          • LinkedIn \u306e\u9023\u7d61\u5148\u306e\u540c\u671f\u304c\u7121\u52b9\u306b\u306a\u3063\u3066\u3044\u308b\u3053\u3068\u3092\u78ba\u8a8d\u3059\u308b<\/li>\n<\/ul>\n

            \u3053\u308c\u3089\u306e\u65b0\u3057\u3044\u30b3\u30f3\u30c8\u30ed\u30fc\u30eb\u3092\u8868\u793a\u3059\u308b\u306b\u306f\u3001\u30af\u30e9\u30a6\u30c9 \u30a2\u30d7\u30ea\u7528 Microsoft Defender \u306e Office 365 \u30b3\u30cd\u30af\u30bf\u3092 [\u30a2\u30d7\u30ea \u30b3\u30cd\u30af\u30bf\u306e\u8a2d\u5b9a] \u30da\u30fc\u30b8\u3067\u30aa\u30f3\u306b\u5207\u308a\u66ff\u3048\u308b\u5fc5\u8981\u304c\u3042\u308a\u307e\u3059\u3002<\/p>\n

            \u6b21\u306e SharePoint \u306e\u65b0\u3057\u3044\u63a8\u5968\u4e8b\u9805\u306f\u3001\u30de\u30a4\u30af\u30ed\u30bd\u30d5\u30c8\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u3067\u4fdd\u8b77\u3055\u308c\u305f\u30b9\u30b3\u30a2\u306e\u6539\u5584\u30a2\u30af\u30b7\u30e7\u30f3\u3068\u3057\u3066\u8ffd\u52a0\u3055\u308c\u307e\u3059\u3002<\/p>\n

              \n
            • OneDrive for Business \u306e\u540c\u671f\u3092\u975e\u7ba1\u7406\u5bfe\u8c61\u30c7\u30d0\u30a4\u30b9\u304b\u3089\u30d6\u30ed\u30c3\u30af\u3059\u308b<\/li>\n
            • \u30c9\u30ad\u30e5\u30e1\u30f3\u30c8\u5171\u6709\u304c\u30db\u30ef\u30a4\u30c8\u30ea\u30b9\u30c8\u307e\u305f\u306f\u30d6\u30e9\u30c3\u30af\u30ea\u30b9\u30c8\u306e\u3042\u308b\u30c9\u30e1\u30a4\u30f3\u306b\u3088\u3063\u3066\u5236\u5fa1\u3055\u308c\u3066\u3044\u308b\u3053\u3068\u3092\u78ba\u8a8d\u3059\u308b<\/li>\n<\/ul>\n

              \u3053\u308c\u3089\u306e\u65b0\u3057\u3044\u30b3\u30f3\u30c8\u30ed\u30fc\u30eb\u3092\u8868\u793a\u3059\u308b\u306b\u306f\u3001\u30af\u30e9\u30a6\u30c9 \u30a2\u30d7\u30ea\u7528 Microsoft Defender \u306e Office 365 \u30b3\u30cd\u30af\u30bf\u3092 [\u30a2\u30d7\u30ea \u30b3\u30cd\u30af\u30bf\u306e\u8a2d\u5b9a] \u30da\u30fc\u30b8\u3067\u30aa\u30f3\u306b\u5207\u308a\u66ff\u3048\u308b\u5fc5\u8981\u304c\u3042\u308a\u307e\u3059\u3002<\/p>\n

              \u6b21\u306e Google \u30ef\u30fc\u30af\u30b9\u30da\u30fc\u30b9\u306e\u63a8\u5968\u4e8b\u9805\u304c\u3001Microsoft \u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 \u30b9\u30b3\u30a2\u306e\u6539\u5584\u30a2\u30af\u30b7\u30e7\u30f3\u3068\u3057\u3066\u8ffd\u52a0\u3055\u308c\u307e\u3059\u3002<\/p>\n

                \n
              • \u591a\u8981\u7d20\u8a8d\u8a3c (MFA) \u3092\u6709\u52b9\u306b\u3059\u308b<\/li>\n<\/ul>\n

                \u3053\u306e\u65b0\u3057\u3044\u30b3\u30f3\u30c8\u30ed\u30fc\u30eb\u3092\u8868\u793a\u3059\u308b\u306b\u306f\u3001\u30af\u30e9\u30a6\u30c9 \u30a2\u30d7\u30ea\u7528 Microsoft Defender \u306e Google \u30ef\u30fc\u30af\u30b9\u30da\u30fc\u30b9 \u30b3\u30cd\u30af\u30bf\u3092 [\u30a2\u30d7\u30ea \u30b3\u30cd\u30af\u30bf] \u8a2d\u5b9a\u30da\u30fc\u30b8\u3067\u69cb\u6210\u3059\u308b\u5fc5\u8981\u304c\u3042\u308a\u307e\u3059\u3002<\/p>\n

                \u6b21\u306e\u30de\u30a4\u30af\u30ed\u30bd\u30d5\u30c8 Defender for Office 365 \u306e\u63a8\u5968\u4e8b\u9805\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 \u30b9\u30b3\u30a2\u5411\u4e0a\u30a2\u30af\u30b7\u30e7\u30f3\u3092\u66f4\u65b0\u3057\u307e\u3057\u305f\u3002 <\/p>\n

                  \n
                • \u30b9\u30d1\u30e0\u306e\u4e00\u62ec\u691c\u51fa\u3067\u5b9f\u884c\u3059\u308b\u30a2\u30af\u30b7\u30e7\u30f3\u3092\u8a2d\u5b9a\u3059\u308b – \u73fe\u5728\u3001\u3053\u306e\u63a8\u5968\u4e8b\u9805\u3092\u69cb\u6210\u3057\u3001\u30a2\u30af\u30b7\u30e7\u30f3 “MoveToJMF” \u3092\u9078\u629e\u3059\u308b\u3053\u3068\u3067\u30dd\u30a4\u30f3\u30c8\u3092\u53d7\u3051\u53d6\u308a\u307e\u3059\u3002\u4eca\u65e5\u304b\u3089\u3001\u300c\u691c\u75ab\u300d\u30a2\u30af\u30b7\u30e7\u30f3\u3092\u9078\u629e\u3057\u305f\u5834\u5408\u306b\u3082\u30dd\u30a4\u30f3\u30c8\u3092\u7372\u5f97\u3067\u304d\u307e\u3059\u3002 <\/li>\n<\/ul>\n

                  [\u6e96\u5099\u3059\u308b\u305f\u3081\u306b\u5fc5\u8981\u306a\u3053\u3068:]<\/p>\n

                  \u3053\u306e\u5909\u66f4\u306b\u5099\u3048\u308b\u305f\u3081\u306b\u5fc5\u8981\u306a\u30a2\u30af\u30b7\u30e7\u30f3\u306f\u306a\u304f\u3001\u305d\u308c\u306b\u5fdc\u3058\u3066\u30b9\u30b3\u30a2\u304c\u66f4\u65b0\u3055\u308c\u307e\u3059\u3002\u30de\u30a4\u30af\u30ed\u30bd\u30d5\u30c8\u306f\u3001\u30de\u30a4\u30af\u30ed\u30bd\u30d5\u30c8\u306e\u30bb\u30ad\u30e5\u30a2\u30b9\u30b3\u30a2\u306b\u8a18\u8f09\u3055\u308c\u3066\u3044\u308b\u6539\u5584\u30a2\u30af\u30b7\u30e7\u30f3\u3092\u78ba\u8a8d\u3059\u308b\u3053\u3068\u3092\u304a\u52e7\u3081\u3057\u307e\u3059\u3002<\/p>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table><\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"

                  MC574388 | Microsoft Secure Score is Adding New Improvement Actions Classification stayInformed Last Updated 0 […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-1829","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"_links":{"self":[{"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/posts\/1829","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/comments?post=1829"}],"version-history":[{"count":0,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/posts\/1829\/revisions"}],"wp:attachment":[{"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/media?parent=1829"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/categories?post=1829"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/tags?post=1829"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}