The checks
What a Microsoft 365 health check covers
26 checks. Five areas. One prioritised report.
A Microsoft 365 health check is only useful if you can see what it looked at. Each check is a defined rule over evidence read from your tenant, weighted so that a low score names the area that owns the problem. The shares below are computed from the weights and update when a check is added.
All 26 checks, grouped into five weighted areas
Grouped into five areas and weighted, so a low score names the area that owns the problem rather than passing one verdict on everything. The percentage is that area’s share of the overall score.
Content & Protection
10 checks41%How content is shared, labelled, owned and maintained — and what an AI assistant would surface first.
- Access & Oversharing
- Labelling & Protection
- Sharing Defaults
- Guest Access
- Site Ownership
- Content Freshness
- Duplication
- Findability
- Workspace Hygiene
- Bulk Access Exposure
Identity & Access
8 checks34%Who can get in, how strongly, and whether a conversation with an outsider could become access.
- Sign-in Protection
- Multi-Factor Coverage
- Authentication Maturity
- Identity & Administration
- Third-Party Applications
- Microsoft Security Baseline
- Collaboration Exposure
- Credential Registration
Email & Domain
2 checks8%Whether the organisation can be impersonated, and what its mailboxes are doing.
- Email Domain Protection
- Mailbox Rules
Workplace Experience
4 checks10%Whether the intranet is current, worth visiting, and built on anything Microsoft is retiring.
- Page Freshness
- Legacy SharePoint
- Publishing Hygiene
- Landing Pages
Licensing & Devices
2 checks7%What is paid for, what is used, and what is managed.
- Licence Utilisation
- Device Management
And the Copilot outcome
Microsoft 365 Copilot
Not scored · an outcome
Drawn from the evidence above, and not part of the score. Copilot answers with whatever the person asking is already allowed to see — it does not widen access, it makes existing access findable by asking. So the report gives one outcome for a controlled pilot — ready, blocked, cannot yet be determined, or not available — and it will not say ready while a hard blocker is unmet, whatever the licence position.
Where this fits
These 26 checks are what runs in every Vitals assessment — see how the assessment works, view a sample assessment report to see them written up, or see pricing. The Copilot pilot outcome draws on them: see the Copilot pilot assessment.