Recent Discussions
Viva for Gov
Viva is an exciting platform that can add value to any organization. Noting that M365 for gov usually has limited features when compared to Enterprise, what are Viva limits in Gov? Thanks!Solved2.5KViews1like2CommentsAzure Gov AIP Unified label client support for MacOS
Hello, I'm currently setting up AIP for our tenant and it doesn't appear that the Unifield Labling client for MacOS is available. Does that mean Office Apps for Mac can't label their documents until this is available? Would they have to use the web versions? Thanks, MikeSolved2KViews0likes1CommentBitlocker Encryption Compliance
Could you detail the settings that are required for Bitlocker full-disk encryption to be compliant with CMMC (FIPS-validated encryption)? I've seen a "FIPS-mode" setting, but heard there was more than one step to being compliant. What Operating Systems is this available on? Win7, Win10, Server 2008, Server 2012, Server 2016? Thanks!Solved4.4KViews0likes2CommentsSecurely Transferring Data from Company O365/M365 to Customers/Partners
What options are available to securely transfer data/documents from company-managed Office 365 (commercial, GCC, or GCC High) environments and customer/partner ones? I realize the data could always stay in one environment to avoid this problem, but what Microsoft options exist to 'deliver' CUI to customers securely?Solved4KViews0likes3Comments
CMMC - does it require MFA at network login?
"NIST 800-171 3.5.3 Use multifactor authentication for local and network access to privileged accounts and for network access to non-privileged accounts" Some debate inside my company about whether MFA is required at network login vs MFA being required only when accessing CUI systems (not all systems on our network have CUI). So, can we place MFA at entry to CUI system and not MFA all employees at time of network login? And does CMMC require anything different that NIST 800-171 3.5.2?Solved6.2KViews1like4CommentsWin10 Laptop MFA?
Does Microsoft have any short-term plans to support Windows 10 laptop MFA through a smartphone app instead of relying on biometrics/smart cards through Windows Hello, to support CMMC compliance? Or should we look to other vendors, such as Cisco's Duo offering?Solved1.1KViews2likes1CommentRequirements/Need for GCC High
I have gone back and forth with Microsoft Support about the need for GCC High. Below is the last interaction I had with them regarding the need for it. They had someone call me to explain it and I explained my understanding with no response, so I assume it's correct. As I understand it and as the CMMC currently stands, knowing it is not fully finalized, we will only need GCC licenses and a sub-tenant if we are awarded a contract that has ML-4 or ML-5 requirements. However, we need to configure our primary tenant to the required ML and be certified at the level prior to bidding to show we have the capability to properly store, manage, and protect the data. If we are awarded we then apply for the GCC tenant and will be required to pay a Microsoft Business Partner setup the GCC sub-tenant and configure the tenant to ML-4 or ML-5, even though we have demonstrated we know how to configure it, because that is a DoD requirement. Please let me know if there are any errors in the process I have just outlined. I understand these requirements may change as the finalized CMMC version is published. Can anyone verify this? My company is working toward ML-3, and I'm still confused as to whether we should be in a GCC High tenant. I saw those licenses available for purchase on the CMMC Marketplace site, making it appear like any DIB company could go that route.Solved2.5KViews3likes3CommentsGCC or GCC High required for CMMC L3?
Do we need to upgrade our CMMC in-scope users from Office 365 commercial to Office 365 GCC or Office 365 GCC High to obtain CMMC Level 3? (https://techcommunity.microsoft.com/t5/public-sector-blog/microsoft-us-sovereign-cloud-myth-busters-cui-effectively/ba-p/1597726)Solved3.7KViews4likes3Comments
Specific clauses in CMMC Level 3 that require GCC High
Sarah_Gilbert Are there any specific clauses in CMMC Level 3 that require GCC High? Is compliance manager on the roadmap? (a CMMC template in Commercial, or availability of the tool in GCC High?) I am sending a surrogate to tomorrow's call, as I am unavailable. Will the call be recorded?Solved4.8KViews6likes4CommentsMSPs and MSSPs
Hi MS Team, I, like many others, have many customers in GCC High / Azure Government. But I am not myself in GCC High. This creates significant challenge as an MSP/MSSP. And the majority of DIB being small businesses that use MSPs/MSSPs.. this creates a lot of challenge for all involved. The easiest way to solve this challenge seems to be for me to get a GCC High tenant; but requirements are currently stringent and limit MSPs from getting tenants. This ends up forcing bad security, such as creating shared accounts on customer tenants for MSPs to login to (or makes them manage dozens of separate accounts for each employee at each client). Further, there is a lack of competition in the GCC High vendor space; 9 approved vendors for GCC High. This forces MSPs/MSSPs like myself, who have been using GCC High for years and have more daily experience in it than these vendors, to send business to these companies or at least create an opportunity for these businesses to try and take our clients (which some of them do try to do). The whole situation is difficult for MSPs/MSSPs, and that's an issue when you consider how most DIB companies use MSPs/MSSPs/. I guess my question is.. are you all tracking this? Is it a concern you share, and are you addressing it at all?Solved1.7KViews6likes3CommentsCMMC Acceleration Program
Can you update us on the timing and content of Microsoft's CMMC Acceleration Program? Based on the March blog by @RichardWakeman, it appears this would be very useful to us as we work toward Level-3 compliance. We can't, however, indefinitely pause our project as we wait for more information. Can't MS incrementally provide some guidance and support as we wait for the CMMC Accreditation Body to dot i's and cross t's?Solved2.1KViews8likes2CommentsKeeping Defender ATP in step with Windows versions
I'm noticing that Microsoft Defender ATP for US Government GCC High customers is supported up to Windows 10, version 1903. Since Feature Updates (Preview) is not yet available for government customers in Endpoint Manager/Intune: what is currently the best way to limit the max Windows version needed to be compatible with Defender ATP, using what we do have in Azure Gov/GCC High?Solved1.6KViews0likes4Comments
Collaboration with External Parties
This touches on Teams, Sharepoint and OneDrive. We need to work with external parties. Some are suppliers, others our government customers. We need to move files and have conversations. How do we best enable this collaboration within CMMC requirements using the tools within GCC-High?Solved1.8KViews2likes2Comments
Events
Recent Blogs
- SharePoint End of support for SharePoint Server 2016 and 2019 is scheduled for July 14, 2026. It's advisable to upgrade directly to SharePoint Server Subscription Edition Purview Informatio...Mar 11, 2025114Views0likes0Comments
- Effective March 1, 2025, the 5% price increase for Office 365 G1 will take effect. Learn more about the changes.Mar 04, 2025898Views0likes2Comments
