Microsoft 365 hygiene is the routine review work that keeps accounts, permissions, devices, and sharing rules from getting messy over time. For an office manager, this matters because many day to day problems start quietly, then turn into lockouts, missing files, risky access, or former staff accounts that never got cleaned up.
A good review does not need to feel technical. It needs to answer a few practical questions. Who still has access. Who has too much access. Where are files being shared too loosely. Which accounts are no longer tied to a real person or approved workflow. If those basics stay clean, your office is in a much better position to avoid repeat disruption.
Start with accounts and license cleanup
The first place to look is user accounts. Small offices often carry extra accounts long after staffing changes, role changes, or vendor transitions. That creates confusion and unnecessary risk.
Review these items each quarter:
- Active users versus current staff list
- Shared mailboxes that still have a real owner
- Former employee accounts that should be removed or converted properly
- Unused licenses that are still assigned
- Break glass or admin accounts that are documented and secured
This is also a good time to confirm that onboarding and offboarding are being handled the same way every time. If those steps feel inconsistent, an [IT onboarding assessment](https://technutsitservices.com/onboarding/) can help document the process and catch gaps before they cause problems.
Check admin roles and multifactor coverage
Not every user needs elevated privileges, yet many small offices end up with more admin access than they realize. That usually happens in busy periods when someone gets temporary access and it never gets rolled back.
Look for:
- Global admin access limited to the right people
- Multifactor authentication enabled for every account that should have it
- Service accounts reviewed and documented
- Password reset methods tied to the correct person
- New device sign ins that nobody has reviewed
This is where practical [managed IT services](https://technutsitservices.com/managed-it/) can help. Regular review is much easier when someone is accountable for user changes, admin role cleanup, and basic Microsoft 365 security settings instead of waiting until a problem shows up.
Review file sharing before it becomes a people problem
Many Microsoft 365 issues are really sharing problems. Someone cannot find the right folder. A former employee still has access to files. A link gets passed around too broadly. A Team or SharePoint site keeps growing without a clear owner.
An office manager can ask a few simple questions that uncover a lot:
- Which shared folders are open to more people than necessary
- Whether external sharing is turned on more broadly than the office expects
- Which Teams and SharePoint sites no longer have a clear business owner
- Whether sensitive files are being shared by link instead of by approved group access
- Whether naming and storage habits are causing duplicate files and version confusion
These are the same kinds of issues that often sit behind [common causes of office downtime](https://technutsitservices.com/insights/office-downtime/). The office may not call them downtime at first, but they still waste time, create rework, and slow daily operations.
Standardize the review so the same issues do not return
Microsoft 365 hygiene works best when it becomes part of a repeatable operating rhythm. Quarterly is a good baseline for most small professional offices. Higher turnover, frequent vendor access, or heavy file sharing may justify more frequent checks.
A simple recurring review should cover:
- User adds and removals since the last review
- Admin role changes
- External sharing settings
- Shared mailbox ownership
- Device and sign in activity worth verifying
- Basic documentation updates for staff changes and key workflows
If that review has never been formalized, or if your office inherited a messy setup from years of ad hoc changes, [request a consult](https://technutsitservices.com/contact/) for a practical Microsoft 365 review. The goal is not more complexity. The goal is fewer recurring issues, cleaner access control, and better day to day stability for the office.