Forum Discussion

ChadPrince's avatar
ChadPrince
Copper Contributor
Jun 18, 2020

Security Defaults | Disable?

Hi Community,

 

We've been tasked to enable MFA for all users within the organization as per Microsoft's updated security policies.

I've done that, however, we're not on AD Premium and I have a few users whom cannot continuously verify their account each time.

MFA Authenticator is setup on all devices, but obviously, a printer or scanner cannot verify itself.

 

My question is, can I disable Security Defaults on Azure and what impact will it have on the User Email Accounts?

Will they need to re-enter their password and will I be able to disable MFA for all users?

MFA is not a requirement for the organization.

 

Regards,

Chad

3 Replies

  • You can, but since you don't have the necessary license to use CA policies, you wont be able to force MFA the "preferred" way. But if your aim is to disable it, that will certainly work.

    • ChadPrince's avatar
      ChadPrince
      Copper Contributor

      VasilMichev 

       

      Update: Disabled Security Defaults on AAD - worked like a charm!

      No longer receiving prompts for MFA, however, those users already enrolled for MFA still continues to work as per normal.

      Disabling MFA per user also doesn't prompt to re-enroll them. 

       

      Thanks for the help, appreciate it!

       

      Regards,

      Chad

       

    • ChadPrince's avatar
      ChadPrince
      Copper Contributor

      VasilMichev 

      Yes, we prefer not to use MFA as we have multiple devices connected around the world where legacy authentication still applies.

      To add, Veeam backups of Office 365 are failing as a result of having MFA Enabled.

       

      Thanks for your response; I will certainly disable Security Defaults and apply the necessary policies to secure the environment.

       

      Regards,

      Chad

Resources