sign-in protection steps

Microsoft 365 environments arrive with open defaults that need deliberate tightening. Local operators gain stronger boundaries and fewer surprises when the right controls are applied early.