Microsoft 365 email and files are central to many small businesses. A single compromised account can expose confidential messages, redirect payments or interrupt everyday work.
Start with multifactor authentication
Enable MFA for all users, especially administrators. Where supported, phishing-resistant methods such as passkeys or security keys provide stronger protection than codes that can be entered into a fake login page.
Review sign-ins and access permissions
Administrators can review suspicious sign-in activity, unfamiliar devices, forwarding rules, delegated mailbox permissions and risky application grants. Unexpected forwarding rules are especially important after an email compromise.
Separate administrative and everyday accounts
Avoid using highly privileged accounts for routine browsing and email. Assign users only the permissions they need and keep recovery contacts and emergency access procedures current.
Protect information beyond the mailbox
Review secure sharing practices, retention needs, backups and user training. Availability and recovery capabilities vary by Microsoft 365 plan, so do not assume every file or mailbox has an independent backup.
Need help implementing these steps?
Computer Hospital can discuss Microsoft 365 security and account protection as part of our Cybersecurity and Business IT services.
Computer Hospital · Houston since 1986
Need help with this issue?
Bring us the symptoms and the steps already tried. We can discuss an appropriate evaluation and explain your service options before any paid work begins.