Why this matters
Microsoft 365 Business Premium includes tools that help with most of the Essential Eight strategies. Configured well, it provides a strong security baseline for small and medium businesses.
What you'll need
- Microsoft 365 Business Premium or equivalent licences
- Global administrator access
- Devices enrolled in Intune (recommended)
Step-by-step instructions
Step 1
Multi-factor authentication
Use Conditional Access to require MFA for all users, with phishing-resistant methods for admins.
Step 2
Patch operating systems and applications
Use Intune Windows Update rings and Microsoft 365 Apps update channels to keep devices and Office current.
Step 3
Configure Office macro settings
Use Intune configuration profiles to block macros from the internet and only allow macros from trusted locations or signed by trusted publishers.
Step 4
User application hardening
Use security baselines in Intune to harden Edge and Office, block Flash/Java content and turn on attack surface reduction rules.
Step 5
Restrict administrative privileges
Remove local admin rights with Intune, use separate admin accounts and the least privileged Entra roles.
Step 6
Application control
Use Windows Defender Application Control or App Control for Business through Intune to allow only approved applications. Start in audit mode.
Step 7
Regular backups
Add a third-party Microsoft 365 backup and test restores regularly.
Summary
Microsoft 365 Business Premium can support every Essential Eight strategy. A phased rollout delivers real security without disrupting staff.
Still Need Help?
Some IT problems are easier to solve with a professional. If you've followed the guide and still need help, the Omnicron team can assist.