Updated the DNS records for the organization to ensure best practices were being used for Microsoft 365. Enabled Intune, DKIM, and DMARC (the latter two for drastically increased email impersonation protection) during this process.
