Hi Greg,
I’m currently building up Sharepoint to move an onsite serve that is both DC and FileShare to the AzureAD. The server is no longer supported so the structures you can put in place through Privileged Access is now much more robust than the server was. That linked with Sentinel should be add multiple more layers of security to our system.
I also fully transferred our school from Google to Microsoft around 15 months ago.
But I’m also a glutton for punishment!
If you have any questions, I’m not sure I’ll have any answers, but I’m happy to help if I can.