Microsoft 365 Security

The Microsoft 365 Security page in MSPControl provides organization-level controls for several Microsoft 365 security features. This page allows administrators to enable or disable key security-related options such as Unified Audit Log notifications, Safe Links, spam filtering, global quarantine report delivery, and standard protection settings.

The page is structured into separate collapsible sections, making it easy to review each security area independently. These settings are useful when administrators need a simplified place to control Microsoft 365 security behavior without managing each option separately across multiple Microsoft portals.

Table of Contents

• Microsoft 365 Security Overview
• Security Settings
• Safe Links Settings
• Spam Filtering Settings
• Global Quarantine Report Settings
• Standard Protection Settings
• Page Actions
• Best Practices

Microsoft 365 Security Overview

The Microsoft 365 Security page focuses on tenant-wide protection and notification settings. It does not display detailed security event logs or individual threat records. Instead, it provides switches for enabling or controlling important security behaviors for the organization.

This page is useful for administrators who need to confirm whether core Microsoft 365 protection features are enabled. It also helps keep common security options visible in MSPControl, especially when security configuration must be reviewed during onboarding, tenant audits, or periodic security checks.

Security Settings

The Security Settings section contains the general Microsoft 365 security notification option shown on the page.

1. Enable Unified Audit Log Notifications controls whether MSPControl should send or process notifications related to the Microsoft 365 Unified Audit Log. This is useful when administrators want visibility into audit log availability or audit-related monitoring behavior.

The Unified Audit Log is important because it can provide tenant-wide activity visibility across Microsoft 365 services. Enabling notifications helps administrators stay aware of audit-related conditions that may require attention.

Safe Links Settings

The Safe Links Settings section controls Safe Links protection for the organization.

1. Enable Safe Links enables Safe Links protection. Safe Links is designed to help protect users from malicious URLs by checking links and applying protection when users interact with them.

This setting is useful when the organization wants link protection to be part of its Microsoft 365 security posture. It is especially relevant for environments where users frequently receive external email, shared documents, or collaboration links.

Spam Filtering Settings

The Spam Filtering Settings section controls spam filtering behavior for the organization.

1. Enable Spam Filtering enables spam filtering protection. This helps reduce unwanted, suspicious, or low-quality email reaching users.

Spam filtering is one of the basic layers of mail security. Enabling this option helps protect users from unwanted messages and can reduce the amount of risky or distracting mail delivered to mailboxes.

Global Quarantine Report Settings

The Global Quarantine Report Settings section controls whether quarantine reporting should be sent to the customer.

1. Send Global Quarantine Report to Customer enables delivery of the global quarantine report to the customer. This is useful when the customer should receive visibility into quarantined messages or related mail-security activity.

This report can help customers understand what is being held or filtered by Microsoft 365 security controls. It can also support review workflows where customers or administrators need periodic visibility into quarantine activity.

Standard Protection Settings

The Standard Protection Settings section controls whether standard protection should be enabled for the organization.

1. Enable Standard Protection enables the standard protection baseline for the organization. This is useful when administrators want to apply a predefined level of Microsoft 365 protection rather than relying only on individual manual settings.

Standard protection can help provide a consistent security baseline. This is especially useful for organizations that need predictable protection settings across tenants or customer environments.

Page Actions

1. Cancel exits the page without saving the current changes.
2. Save Changes applies the selected Microsoft 365 security settings to the organization.

Administrators should review all enabled and disabled options before saving, because these settings can affect mail protection, audit visibility, quarantine reporting, and the organization’s overall Microsoft 365 security baseline.

How Microsoft 365 Security Fits into MSPControl

The Microsoft 365 Security page gives MSPControl a simplified control point for important Microsoft 365 protection features. Instead of treating each protection option as an isolated setting, this page groups common security controls into one administrative view.

This makes it easier to check whether core protections are enabled and whether customer-facing reporting is configured. It is especially useful during onboarding, security reviews, policy validation, or when comparing security settings across multiple organizations.

Best Practices

• Review this page during tenant onboarding to confirm that core Microsoft 365 security controls are configured from the start.
• Enable Unified Audit Log Notifications when audit visibility is important for compliance, investigation, or security monitoring workflows.
• Use Safe Links as part of the organization’s link-protection strategy, especially for users who frequently receive external email or shared links.
• Keep Spam Filtering enabled unless there is a specific reason to manage filtering through another approved process.
• Enable Global Quarantine Report delivery when customers need regular visibility into quarantined email activity.
• Use Standard Protection to maintain a consistent Microsoft 365 security baseline across the organization.
• Document any disabled security settings so future administrators understand why protection was intentionally changed.
• Review these settings periodically as part of normal Microsoft 365 security maintenance.