Forum Discussion
Jeff Williams
Oct 18, 2022Brass Contributor
Remove MFA on Global Admin
I came across and article, didnt save it. About best practices for MS security. It mentioned that MS actually recomends having a Global admin setup without MFA, for the purpose of being able to acces...
Oct 18, 2022
With security default you enable MFA for all administrative account and require all users to set up for MFA and enforce MFA when Azure AD think it's necessary. I believe what you've been reading is about the "break glass" accounts that should be set up differently. This isn't possible using security defaults as you cannot use conditional access policies.