Learn
M365 cleanup & tenant health guides
Practical guides for cleaning up Microsoft 365: inactive users, license waste, security drift, and tenant hygiene. Run the same checks automatically with a free Tenant Hawk scan.
Glossary
M365 and Entra ID terms with short, plain-language definitions.
Compare
Tenant Hawk vs Secure Score, Admin Center, and self-hosted options.
License calculator
Estimate recoverable Microsoft 365 spend, then scan for real numbers.
Security
Conditional Access, MFA, legacy auth, admin roles, and guest access misconfigurations.
Identity
Admin roles, MFA coverage, guest access, and sign-in risks across Entra ID.
Cost
Unused licenses, disabled users with seats, and renewal waste in Microsoft 365.
Reliability
Expiring app secrets, SSO certificates, domains, and Intune sync drift.
Governance
Audit prep, cleanup cadence, policy evidence, and tenant operating standards.
Hygiene
Inactive users, empty groups, SharePoint sharing, and device compliance clutter.
How to block legacy authentication in Microsoft 365
Block legacy auth in Entra ID without breaking mail flow. Find what's still using SMTP/IMAP, enable security defaults or Conditional Access, and verify before you enforce.
Read guideHow to find never-signed-in licensed users in Microsoft 365
Find M365 users who have licenses but never signed in. This is the fastest license waste in most tenants. Reclaim seats before renewal with sign-in reports and safe offboarding steps.
Read guideHow to find wasted Microsoft 365 licenses
Identify unused seats, oversized SKUs, and duplicate assignments. Estimate how much you can reclaim each month.
Read guideHow to find inactive and report-only Conditional Access policies
Audit Conditional Access policies stuck in report-only mode or never enforced. Find policies that log but do not block, and safely move validated rules to On.
Read guideM365 expiring secrets, certificates, and domains
App registration expirations, domain renewals, and mailbox limits: the reliability checks that prevent surprise outages.
Read guideCommon Microsoft 365 security misconfigurations
Conditional Access gaps, MFA holes, over-privileged apps, and guest access issues: what to look for and how to fix them.
Read guideHow to clean up your Microsoft 365 tenant
Step-by-step M365 cleanup for admins: inactive users, unused licenses, stale groups, security drift, and tenant hygiene. Know where to start before you delete anything.
Read guideMicrosoft 365 Tenant Health Checklist for IT Admins
Step-by-step M365 tenant health checklist: security, cost, reliability, and hygiene checks admins should run monthly or before audits.
Read guideMicrosoft 365 tenant cleanup & hygiene best practices
Clean up orphaned groups, stale accounts, inactive guests, unmanaged devices, and sharing defaults before clutter slows every admin task.
Read guideHow to Prepare for a Microsoft 365 Audit (Checklist for IT Admins)
Pre-audit checklist for Microsoft 365: what auditors ask for, where tenants fail, and how to verify security, licensing, and access controls before review day.
Read guideTry it on your tenant
Run a free health scan in under 5 minutes
Tenant Hawk connects read-only to Microsoft 365 and Entra, scores your tenant across security, cost, reliability, and hygiene, then gives you a prioritized fix-it list.
Read-only access · no credentials stored · no credit card