Learn
M365 cleanup & tenant health guides
Practical guides for cleaning up Microsoft 365: inactive users, license waste, security drift, and tenant hygiene. Run the same checks automatically with a free Tenant Hawk scan.
Security
Conditional Access, MFA, legacy auth, admin roles, and guest access misconfigurations.
Identity
Admin roles, MFA coverage, guest access, and sign-in risks across Entra ID.
Cost
Unused licenses, disabled users with seats, and renewal waste in Microsoft 365.
Reliability
Expiring app secrets, SSO certificates, domains, and Intune sync drift.
Governance
Audit prep, cleanup cadence, policy evidence, and tenant operating standards.
Hygiene
Inactive users, empty groups, SharePoint sharing, and device compliance clutter.
How to block legacy authentication in Microsoft 365
Block legacy auth in Entra ID without breaking mail flow. Find what's still using SMTP/IMAP, enable security defaults or Conditional Access, and verify before you enforce.
Read guideHow to find never-signed-in licensed users in Microsoft 365
Find M365 users who have licenses but never signed in. This is the fastest license waste in most tenants. Reclaim seats before renewal with sign-in reports and safe offboarding steps.
Read guideHow to find wasted Microsoft 365 licenses
Identify unused seats, oversized SKUs, and duplicate assignments. Estimate how much you can reclaim each month.
Read guideM365 expiring secrets, certificates, and domains
App registration expirations, domain renewals, and mailbox limits: the reliability checks that prevent surprise outages.
Read guideCommon Microsoft 365 security misconfigurations
Conditional Access gaps, MFA holes, over-privileged apps, and guest access issues: what to look for and how to fix them.
Read guideHow to clean up your Microsoft 365 tenant
Step-by-step M365 cleanup for admins: inactive users, unused licenses, stale groups, security drift, and tenant hygiene. Know where to start before you delete anything.
Read guideMicrosoft 365 tenant health overview & checklist
A practical M365 health overview and checklist for admins: security, cost, reliability, and hygiene checks you should run regularly.
Read guideMicrosoft 365 tenant cleanup & hygiene best practices
Clean up orphaned groups, stale accounts, inactive guests, unmanaged devices, and sharing defaults before clutter slows every admin task.
Read guideHow to prepare your M365 tenant for an audit
What auditors ask for, where tenants usually fail, and a pre-audit checklist for security, licensing, and access controls.
Read guideTry it on your tenant
Run a free health scan in under 5 minutes
Tenant Hawk connects read-only to Microsoft 365 and Entra, scores your tenant across security, cost, reliability, and hygiene, then gives you a prioritized fix-it list.
Read-only access · no credentials stored · no credit card