Office 365 Security & Compliance
We have partnered with UserVoice, a third-party service and your use of the portal and your submission is subject to the UserVoice Terms of Service & Privacy Policy. Please do not send any novel or patentable ideas, copyrighted materials, samples or demos for which you do not want to grant a license to Microsoft.
Welcome to the Security (Protection) & Compliance UserVoice forum. We’re happy you’re here! If you have suggestions or ideas on how to improve Security or Compliance related features in O365, we’d love to hear them!
How it works
◾Check out the ideas others have suggested and vote on your favorites
◾If you have a suggestion that’s not listed yet, submit your own — 25 words or less, please
◾Include one suggestion per post
Thanks for joining our community and helping improve these features in Office 365!
Need Tech Support? Please see the O365 Community for the product or feature you are having issues with, or open a support ticket through your Office 365 administrator portal.
-
Allow us to extract the unified audit logs more than 90 days ago
Allow us to extract the unified audit logs more than 90 days ago
I think that many large enterprises have this desire in security policy.
128 votes -
Office 365 needs a suite-wide URL web link shortener
I could increase the adoption of various features / apps in Office 365 if I had a URL web link shortener in my tenant.
For example, we recently had some groups working on shared Word documents via OneDrive. In order to help them get up-to-speed, I created a bit.ly link so that they could get directly to the OneDrive where we were all working together.
I am also trying to get people to send links to documents that they maintain versus copies. I have a mnemonic "send a link, helps me think, send a copy, make inbox sloppy."
If the…
124 votes -
Remove Limit of 60 users for New Anti-Phishing Policy
Why is there a limit of 60 users that can be added to the new Anti-Phishing Policy? I would expect to have this very important feature available to ALL of our O365 users. Please remove this limitation so that we can add ALL of our O365 users to this new Anti-Phishing Policy
120 votes -
EMS Suite Licensing should be free for Government Tenants
Government IT shops are an entirely different beast than from your typical commercial customer.
An IT shop can range in size from 2-3 staff for a small city or 100s or 1,000s for a large city/county/state. Regardless of size in terms of staff or budget, ALL of us have an identical regulatory responsibility.
Protecting critical infrastructure and services our citizens depend on isn't an optional activity. Why are the necessary tools contained in the EMS licensing suites not made available to Government entities free of charge? These are critical tools which must be utilized in order to best protect the…
120 votes -
Add functionality to re-deliver failed messages from Message Trace
Third party spam filters, such as the offerings from Barracuda, MXLogic, and many others, have the ability to allow administrators to force re-delivery of messages that may have failed due to either a restrictive rule or a SMTP alias that did not exist for a recipient (typically true with migrations from non-Exchange based systems).
It would be highly beneficial to admins to have this control and allow for forced re-delivery of messages as necessary.
119 votes -
Block Office Files with Macro's
We are getting numerous malware attacks with zero hour Office files containing malicious Macro's, these are often blocked within 60-90 minutes but some are still being received by users. The signature is changing regularly so they aren't picked up by your scanners despite the original virus being around 12 months old.
We do educate the users not to open them and Macro's are disabled, but blocking the content at the gateway would be better.
Some of this functionality was available in Forefront for Exchange.
119 votes -
FIDO U2F support
Office 365 for work: We need Office 365 for Work support a FIDO Universal Second Factor (U2F) protocol standard Security Key.
As many organisation would like to shift to Office 365 but they concern about the security standard which request Office 365 to support Universal Second Factor (U2F) protocol standard security key as Microsoft is a member of FIDO.
119 votes -
Add support for CAA records in DNS panel
I'd very much like to see support for CAA records in the future =).
See https://support.dnsimple.com/articles/caa-record/The check for this record is going to be mandatory with September 2017. The security of all our certificates and domains would be greatly improved if we could set this record :)
115 votes -
Fix DMARC implementation to match the RFC7489 defined behaviour for p=reject and p=quarantine
Fix DMARC implementation to match the RFC 7489 defined behaviour for p=reject and p=quarantine.
Current behaviour p=reject messages are quarantined???115 votes -
Make secure score available to partners
As a Partner I have access to the tenant of my clients. I'm not able to see the score of my clients tenant and check easily what changes need to be done and discuss this with my clients.
I can only do this when I have an separate admin account of the clients tenant.
Now with the integration of secure score into the compliance center shows a widget of the score but not the actions that needs to be taken. Please integrate the full secure score115 votes -
Allow us to create alerts for sign in Failures and Successes based off of IP Geo Location. Alerts if log in success outside of country.
I would like to Create and alert if there are failed login attempts or successful login attempts from IP addresses originating outside of my City/State/Country.
Allow us to either white list IP addresses and alert for any not on the white list. Blacklist IP addresses and alert based off of just black list. Select Country regions and alert if selected countries IP addresses are the originating IP. Allow us to alert for only failures, only successes, or both.
113 votes -
New-InboxRule cmdlet needs CreationDate added
When an account compromise happens, the majority of times the threat actor will create a new-inboxrule to hide their activity. Currently when new-inboxrules are created there is no logging for the Creation Date via powershell cmdlet. If we could get this logged, it would help tremendously with account compromises. Also adding a historical rule creation view for past 90 days would be beneficial as well.
111 votes -
Enable DKIM for Office 365 Home with custom email domain
The Office 365 Home subscription allows you to use your your own email domain. However, there is no option to enable DKIM and without it, outgoing email often ends up in the recipient's Spam folder, making the custom email domain capability useless.
Please expose the DKIM setting on the UI for O365 Home subscribers.
The feature itself is already implemented and available in the Business edition, but requires the Admin panel which does not exist in Office 365 Home.109 votes -
Ability to perform eDiscovery collections for specific Outlook Folders
I have a requirement from a large customer (85K users) that needs to be able to perform eDiscovery collections for specific Outlook folders. We can do date range and Full Mbx collections, but not specific folders. This was possible on-premises, but not in Exchange Online ????
107 votesCmdlets available for specific folder collections (https://docs.microsoft.com/en-us/microsoft-365/compliance/use-content-search-for-targeted-collections?view=o365-worldwide) and UI version is on the backlog.
-
Report Message Add-in for GCC
Seems pretty odd that the report message add-in doesn't work in government tenants. It is definitely something that should be enabled.
107 votes -
spam filter allowed and blocked sender limit
Please remove Safe and Blocked Sender Limit. There should be an option to add unlimited allowed and blocked list sender and domains. Existing spam protection does not block most of emails.
106 votes -
Allow duration of Retention label to be changed when the retention is based on when the label is applied
When a retention label duration is based on the date the label is applied, the retention period may not be changed. It can be changed if the Created or last modified is chosen. This is impacting our ability to use the retention policies as they need to be active from the date of application with the capability to change duration in the future.
106 votes -
Ability to limit access to Online Archive by Client Location
We'd like the ability to limit access for users to their O365 Online Archives by client location/IP.
For example, if the user is connected to the corporate network, their online archive should be accessible through Outlook. If the user is away, working from home, etc, the online archive is not available/accessible.
Whilst we have security measures in place (like MFA) for accounts if a user's credentials are stolen, the most common access would be via OWA from an external location/IP. By archiving (moving) old/sensitive email to the online archive, and restricting access by location, we could effectively limit the amount…
105 votes -
Please add more Phishing Templates for Attack Simulator
Please add additional Phishing Templates, or create a GitHub repository for the community to collaborate on phishing templates. Other solutions have rich libraries so if Microsoft wants to compete with other phishing simulators, it really needs more choices.
105 votes -
Conditional Access by Network Location
Want to bring network location-based conditional access policy to not only SharePoint but also the whole of office365.
104 votes
- Don't see your idea?