Guides

Plain-English how-tos for the IT jobs growing companies do themselves.

• How to set up DMARCA step-by-step guide to setting up DMARC: check SPF and DKIM, publish p=none, read reports, then move to quarantine and reject. With example records for Microsoft 365 and Google Workspace.
• SPF for Microsoft 365 and Google WorkspaceThe correct SPF record for Microsoft 365 and Google Workspace, how to add other senders, the 10-lookup limit, ~all versus -all, and the mistakes that break SPF.
• Enable DKIM in Microsoft 365Turn on DKIM signing for your domain in Microsoft 365: find the two CNAME records, publish them at your DNS host and enable signing in the Defender portal or Exchange Online PowerShell.
• Offboard an employee in Microsoft 365Offboard a leaver in Microsoft 365 the right way: block sign-in, revoke sessions, remove MFA, convert the mailbox to shared, forward mail, hand over OneDrive, wipe devices and free the license.
• Turn on MFA in Microsoft 365Three ways to require MFA in Microsoft 365: security defaults, Conditional Access and per-user MFA. Which to use for your license, how to roll it out and how to handle admins and break-glass accounts.
• Find mail forwarding rulesFind mailboxes forwarding email outside your company and inbox rules that hide messages, a classic sign of business email compromise. With PowerShell and a one-click report.
• Compromised Microsoft 365 accountStep-by-step response to a hacked Microsoft 365 account: block sign-in, revoke sessions, reset password and MFA, remove malicious inbox rules and apps, check what was sent, then restore access.
• Microsoft 365 security checklistThe Microsoft 365 security settings every small business should check: MFA, admin roles, legacy authentication, forwarding, app consent, guests, auditing, DKIM and DMARC.
• Google Workspace security checklistThe Google Workspace settings to check: 2-Step Verification enforcement, super admin hygiene, Drive sharing, Gmail forwarding, third-party app access, unused accounts and email authentication.
• MSP vs in-house vs self-serve ITCompare the three ways a growing company can run IT: an outside managed service provider, an in-house hire or a self-serve IT platform. Costs, control, coverage and when each makes sense.
• Reduce Microsoft 365 license costsFind unused and misassigned Microsoft 365 licenses: leavers still licensed, shared mailboxes with paid licenses, inactive accounts and people on a higher plan than they need.
• Cyber insurance MFA requirementsWhat cyber insurance applications typically ask about MFA, admin accounts, email security and incident response, and how to show evidence from Microsoft 365 or Google Workspace.
• How to read DMARC reportsWhat DMARC aggregate (rua) reports contain, how to tell your real senders from spoofing and forwarding, and when the reports say it's safe to move to quarantine and reject.
• Microsoft Secure Score explainedWhat Microsoft Secure Score measures, why a high score doesn't always mean you're safe, which recommendations matter most for a small business, and how to raise it without breaking things.