| 📝 Account Lockout Duration is not set 60 seconds or more 🟢 | | 🟢 x3 |
| 📝 Account Lockout Threshold is not set to 10 or less 🟢 | | 🟢 x3 |
| 📝 Allow Users To Remember MFA On Devices They Trust is enabled 🟢 | | 🟢 x3 |
| 📝 Conditional Access By Location is not defined 🟢 | | 🟢 x3 |
| 📝 Custom Banned Password List is not enforced 🟢 | | 🟢 x3 |
| 📝 Device Code Authentication Flow is not restricted 🟢 | | 🟢 x3 |
| 📝 Global Administrator Role assigned to more than 4 users 🟢 | | 🟢 x3 |
| 📝 Guest Invite Settings is not set to Only Users Assigned To Specific Admin Roles Can Invite Guest Users 🟢 | 1 | 🟢 x6 |
| 📝 Guest Users are not reviewed on a regular basis 🟢 | | 🟢 x3 |
| 📝 Guest Users restricted to their own directory objects 🟢 | 1 | 🟢 x6 |
| 📝 MFA For Administrators is not required 🟢 | | 🟢 x3 |
| 📝 MFA For All Users is not required 🟢 | | 🟢 x3 |
| 📝 MFA For Risky Sign-Ins is not required 🟢 | | 🟢 x3 |
| 📝 MFA For Windows Azure Service Management API is not required 🟢 | | 🟢 x3 |
| 📝 MFA To Access Microsoft Admin Portals is not required 🟢 | | 🟢 x3 |
| 📝 Named Locations are not defined 🟢 | | 🟢 x3 |
| 📝 Non-Privileged Users Multi-Factor Auth Status is not enabled 🟢 | | 🟢 x3 |
| 📝 Notify All Admins When Other Admins Reset Their Password is set No 🟢 | | 🟢 x3 |
| 📝 Notify Users On Password Resets is set to No 🟢 | | 🟢 x3 |
| 📝 Owners Can Manage Group Membership Requests In The Access Panel is set to Yes 🟢 | | 🟢 x3 |
| 📝 Privileged Users Multi-Factor Auth Status is not enabled 🟢 | | 🟢 x3 |
| 📝 Reconfirm Authentication Information is set to 0 🟢 | | 🟢 x3 |
| 📝 Require MFA to register or join devices with Microsoft Entra ID is set to No 🟢 | | 🟢 x3 |
| 📝 Restrict Access To Microsoft Entra Admin Center is set to No 🟢 | | 🟢 x3 |
| 📝 Restrict User Ability To Access Groups Features In The Access Pane is set to No 🟢 | | 🟢 x3 |
| 📝 Security Defaults are not enabled 🟢 | | 🟢 x3 |
| 📝 Self-Service Password Reset does not require 2 authentication methods 🟢 | | 🟢 x3 |
| 📝 Tenant Creation is set to Yes 🟢 | 1 | 🟢 x6 |
| 📝 User Consent For Applications is not set to Allow From Verified Publishers 🟢 | | 🟢 x3 |
| 📝 User Consent For Applications is not set to Do Not Allow User Consent 🟢 | | 🟢 x3 |
| 📝 Users Can Create Microsoft 365 Groups In Azure Portals, API Or PowerShell is set to Yes 🟢 | | 🟢 x3 |
| 📝 Users Can Create Security Groups In Azure Portals, API Or PowerShell is set to Yes 🟢 | | 🟢 x3 |
| 📝 Users Can Register Applications is set to Yes 🟢 | 1 | 🟢 x6 |