Ramifications of security defaults setting for your ㅤtenant will be turned on

Topic

New Reply

I just received an notice form MS saying:

The security defaults setting for your ㅤ tenant will be turned on by November 7, 2023

You’re receiving this email because you’re a global administrator.

To help protect your organization, we’re always working to improve the security of Microsoft cloud services. As part of this, we’re enabling the security defaults setting in your tenant that includes multifactor authentication, which can block more than 99.9 percent of identity attacks that attempt to compromise your accounts.

How will this effect the end users?
Will they need MFA for their Outlook/Mac Mail desktop applications?
Mobile devices?

or is this just for web browser based logins to web mail etc?

Reply | Quote

Replies

Yes, they will need MFA for everything. If you are not using MFA yet, you are a sitting duck. Your end users need to get with it and learn how to use it. They likely are already if they are doing online banking. If you are their GA I’m sort of surprised you are not already using this at least for yourself.

Reply | Quote

My recommendation: Ensure you have an Azure (Entra) P1 license. With that you can set up whitelisting for static IPs. So if everyone is in the office they do NOT get a mfa prompt. If they are outside and in potentially not so great locations they do.

Even if you don’t do this setting the MFA prompt now allows you to say “don’t prompt me again for 365 days”.

It really is not an interference and does protect you from people outside your org that have no biz getting in.

Turn on MFA, turn off the mandate that people change their passwords. They will love you for this.

Susan Bradley Patch Lady/Prudent patcher

1 user thanked author for this post.

steeviebops

Reply | Quote

I assume that if i go to Active Users/user name and then click on Multi factor authentication at the top and enable it for ONE user.

I can play with it and simulate turning it on for the entire tenet.

(ie turning it on for one user will function the same as turning it on for the tenant)

Reply | Quote