Module: Compliance · Drift Prevention
Configuration Drift Detection
Monitors compare live configuration with a captured baseline every six hours, or on demand, and record every deviation at property level, naming the setting, the baseline value and the value now in place. Entra ID (including conditional access, authentication methods, and group members, owners and permission grants), SharePoint, Teams, Exchange Online (including mailbox permissions) and Intune are in scope. Drift is reported for a person to judge and never silently reverted; putting it back is a separate, deliberate restore.
- 01
Pain Point
What's the problem?
Configuration changes made for good reasons and bad ones look identical until somebody goes looking.
- 02
Remedy
How do we attack it?
Compare current configuration against the baseline and report every deviation at property level
- 03
Your Value
What do you get out of it?
Surfaces changed settings while there is still time to ask why