Forum Discussion
Transition from baseline policies to security defaults
Vichet SIM Yes, highly recommend starting with Alex’s spreadsheet here https://www.itpromentor.com/conditional-access-for-the-smb-a-how-to-guide/ Use his spreadsheet and customise it to your needs. Makes it far easier to design them, and is also a good starting point.
CloudHal- This is a associated with your reply and I am wondering if something has changed. This is a new experience for me and I am in the middle of setting up a small company we purchased with a new account. By default Security Defaults are on. My first urge is to leave them on as it forces good practices in general but believe it or not we have people at this company without a smart phone using O365. That said when I go into Azure > Security Policies > Conditional Access policies the new policy button is greyed out and there is a message "Create your own policies and target specific conditions like Cloud apps, Sign-in risk and Device platforms with Azure AD Premium" and a link to sign up.
Is the button greyed out because Defaults are on? If I turn off defaults am I going to be able to even create policies?
CloudHalO365 Business Essentials and O365 Business Premium.
Pete200414 Have a look at this comparison https://docs.microsoft.com/en-us/office365/servicedescriptions/microsoft-365-service-descriptions/microsoft-365-business-service-description
And this as well (linked to in above info) https://techcommunity.microsoft.com/t5/small-and-medium-business-blog/azure-active-directory-premium-p1-is-coming-to-microsoft-365/ba-p/1275496
- So neither of those give you the rights to use conditional access, so that is your issue.
I would upgrade to Microsoft 365 if you can.
