Microsoft Defender for Office 365 Recommended Configuration Analyzer (ORCA) 2.5 released

Hi All,
Just a few Hours ago, the Microsoft Defender for Office 365 Recommended Configuration Analyzer (ORCA) 2.5 was released to the PowerShell Gallery.
PowerShell Gallery ORCA 2.5


Seems like some bugs have been closed ORCA Closed Issues


Check installed Module and what’s available from the PowerShell Gallery
Get-InstalledModule ORCA
Find-Module ORCA


Uninstall old Module and install the newest one from the PowerShell Gallery
Uninstall-Module ORCA
Install-Module ORCA
Get-InstalledModule ORCA


Check what commands are available in the Module
Get-Command -Module ORCA


If you have the ExchangeOnlineManagement Preview (3.2.0) installed, make sure you use the ExchangeOnlineManagement 3.1.0 and connect to ExchangeOnline (Connect-ExhangeOnline) and the Security and Compliance (Connect-IPPSSession) first
Get-Module ExchangeOnlineManagement -ListAvailable
Import-Module ExchangeOnlineManagement -RequiredVersion 3.1.0
Connect-ExchangeOnline
Connect-IPPSSession


To run the Report use the command below
Get-ORCAReport


The Report looks like this


Details of the Configuration Issues


Issues are on the “Default Policy”


DKIM is not enabled on the Teams SIP Domain - can be ignored here


Tenant Settings Unified Audit Log is not enabled


Seems like that can’t be enabled.
Set-AdminAuditLogConfig -UnifiedAuditLogIngestionEnabled $true
Get-AdminAuditLogConfig


Regards
Andres Bohren

Exchange Logo
