Microsoft Defender for Office 365 Recommended Configuration Analyzer (ORCA) 2.0 released
Hi All,
A few days ago a new Version of the Microsoft Defender for Office 365 Recommended Configuration Analyzer (ORCA) Module has been released.
ORCA 2.0
![](https://icewolffile.blob.core.windows.net/$web/202204/ORCA_2.0_01.jpg)
Use the following commands to Install the Module
Find-Module Orca
Install-Module Orca
Get-InstalledModule Orca
![](https://icewolffile.blob.core.windows.net/$web/202204/ORCA_2.0_02.jpg)
You can already connect to Exchange Online (Or the Script will do it also for you)
Connect-ExchangeOnline
![](https://icewolffile.blob.core.windows.net/$web/202204/ORCA_2.0_03.jpg)
There is just one simple Command to run the Report
Get-OrcaReport
![](https://icewolffile.blob.core.windows.net/$web/202204/ORCA_2.0_04.jpg)
It's recommended to run the report from Time to Time. I've corrected some settings and improved from 89% to 91%
![](https://icewolffile.blob.core.windows.net/$web/202204/ORCA_2.0_05.jpg)
Orca still recommends to enable EnduserSpamNotifications and set the frequency lower than 3 Days
![](https://icewolffile.blob.core.windows.net/$web/202204/ORCA_2.0_06.jpg)
I guess here is an error - as i have enabled the EnduserSpamNotifications
Get-HostedContentFilterPolicy -Identity "PolicyName" | fl *SpamNotification*
![](https://icewolffile.blob.core.windows.net/$web/202204/ORCA_2.0_07.jpg)
SafeLinks and SafeAttachements are not applyied to all Domains (in my Environement due to Licensing)
![](https://icewolffile.blob.core.windows.net/$web/202204/ORCA_2.0_08.jpg)
DKIM is not set for the Teams Direct Routing Domain (can be ignored)
![](https://icewolffile.blob.core.windows.net/$web/202204/ORCA_2.0_09.jpg)
SPF is not set for the Teams Direct Routing Domain (can be ignored)
![](https://icewolffile.blob.core.windows.net/$web/202204/ORCA_2.0_10.jpg)
Regards
Andres Bohren
![](https://icewolffile.blob.core.windows.net/$web/logos/Exchange_logo.png)