Jan 27 2020
- last edited on
Feb 01 2023
Any action required from all end users or affect to them if we we transition to security defaults in Office 365 admin?
Note; currently we are uses baseline policies and all users is already apply MFA using text code & Microsoft Authentication app.
Jan 28 2020 12:07 AM
Well for starters, SMS/text is not an available method with security defaults in place. Read the documentation for all the other differences: https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/concept-fundamentals-security-d...
Jan 28 2020 04:04 AM
Feb 03 2020 02:38 AM
Since Security Default are block legacy authentication protocol for whole tenant. If some of users required this protocol such as IMAP for some use-case, How do we exclude it?
Thanks for help.
Feb 03 2020 02:40 AM
@Vichet SIM you can't, you would need to use conditional access instead and build some policies. But that would require AAD premium.
Feb 03 2020 02:43 AM
@CloudHal thanks you. Can you provide some tip how build some policies in conditional access. We will go through to AAD premium to fix the issue.
Feb 03 2020 02:44 AMSolution
@Vichet SIM Yes, highly recommend starting with Alex’s spreadsheet here https://www.itpromentor.com/conditional-access-for-the-smb-a-how-to-guide/ Use his spreadsheet and customise it to your needs. Makes it far easier to design them, and is also a good starting point.
Feb 03 2020 03:06 AM
Thanks you @CloudHal for the advise, I will check it for more. Any ways how modern auth from Default Security can help for this required! I thinks it might related to this topic, but not sure how to deploy and move to modern auth in Security Default.
Apr 14 2020 02:23 PM
@CloudHal- This is a associated with your reply and I am wondering if something has changed. This is a new experience for me and I am in the middle of setting up a small company we purchased with a new account. By default Security Defaults are on. My first urge is to leave them on as it forces good practices in general but believe it or not we have people at this company without a smart phone using O365. That said when I go into Azure > Security Policies > Conditional Access policies the new policy button is greyed out and there is a message "Create your own policies and target specific conditions like Cloud apps, Sign-in risk and Device platforms with Azure AD Premium" and a link to sign up.
Is the button greyed out because Defaults are on? If I turn off defaults am I going to be able to even create policies?
Apr 15 2020 06:48 AM
Apr 15 2020 06:49 AM - edited Apr 15 2020 07:11 AM
@Pete200414 Have a look at this comparison https://docs.microsoft.com/en-us/office365/servicedescriptions/microsoft-365-service-descriptions/mi...
And this as well (linked to in above info) https://techcommunity.microsoft.com/t5/small-and-medium-business-blog/azure-active-directory-premium...