Forum Discussion
Gurdev Singh
Jun 07, 2018Iron Contributor
Best practise - Keeping a generic Office 365 Global Admin account free from all policies
Quite a while ago, it was recommended to have a generic account for Office 365 to act as a sort of last resort if the regular synced accounts fail to login for some reasons. Anyone know if this ...
- Jun 07, 2018
If you are using AD FS, yes it's recommended to have at least one cloud-only GA. Make sure to protect it via MFA though, or at the very least configure an Conditional access policy to require MFA on "unknown" locations.
VasilMichev
Jun 07, 2018MVP
If you are using AD FS, yes it's recommended to have at least one cloud-only GA. Make sure to protect it via MFA though, or at the very least configure an Conditional access policy to require MFA on "unknown" locations.
Jun 09, 2018
Are you also aware of the Microsoft Secure Score? I would recommend you to evaluate how is your tenant in terms of security settings what will provide also information about your admin account(s)