Strengthening the Microsoft 365 Security Posture of a Public School District

The Problem

The school district had a large Microsoft 365 environment supporting over 170,000 users between students and staff. This size made it difficult to implement and scale security improvements. Our client owned Microsoft 365 A5 licenses with advanced security capabilities but was not fully utilizing them. Furthermore, the school district relied on some third-party applications for capabilities already available through its Microsoft licenses.

Our client needed to strengthen protections across identity and access, endpoints, Microsoft 365 data, OneDrive and SharePoint storage, Teams communications, and data leaving the organization. Achieving these improvements at scale required additional Microsoft security expertise, leading the school district to our AllyCare Guardian for Microsoft 365 service.

The BlueAlly Solution

First, we conducted a Microsoft 365 security assessment of our client’s tenant, reviewing its existing configurations against Microsoft recommendations and other standardized security frameworks. Our team then identified security gaps across its Microsoft 365 environment, creating a remediation roadmap that went beyond its Microsoft Secure Score. Following this assessment, we helped the school district configure and strengthen security across identity and access, OneDrive, SharePoint, Teams, and other Microsoft 365 services. We implemented Intune for endpoint management, providing the organization with improved control over security policies applied to user devices.

We also established data security and data loss prevention (DLP) policies to better protect sensitive data and strengthen control over how data is shared outside the school district’s IT environment. These changes helped our client make greater use of the security capabilities included in its Microsoft 365 A5 licenses, reducing reliance on third-party tools and minimizing unneeded costs. Our expert technicians provided hands-on training and user enablement to IT administrators, preparing the internal team to manage the environment, implement future changes, and use their Microsoft security stack independently. Together, these improvements established a stronger Zero Trust foundation for the school district’s evolving security needs.

The Results

As a result of the project, our client more than doubled its Microsoft Secure Score to 81% across an environment supporting more than 170,000 users. Through this assistance, the client maximized the value of its Microsoft 365 A5 licenses while reducing reliance on third-party applications, enabling the school district to lower costs and create a more unified Microsoft security ecosystem. By strengthening our client’s Microsoft security posture, we helped its teams safeguard sensitive data while reducing the risk of operational disruptions and data loss throughout its many institutions.