The security defaults setting for your xxxxx tenant will be turned on by May 8, 2023

Question

I see MS is going to activate this automatically. Are we being forced to use this setting? Or can we disable / revert so that our users who cannot use MFA can still get access?

Thank you in advance!

Answer 1

@abel.alvarez

Thank you for your post!

When it comes to the email that you received, I found some similar internal issues and have reached out to the MFA Product Team to confirm if this is a forced feature or if this can be disabled.

In the meantime, on May 8th, if your tenant isn't leveraging Security Defaults, Conditional Access Policies, etc..., the Security Defaults feature will be enabled automatically. However, from my understanding after this is enabled, you should still be able to disable Security Defaults, so that your users who can't use MFA can still get access to your Azure AD tenant.

I hope this helps!

If you have any other questions, please let me know. Thank you for your time and patience throughout this issue.

---

Additional Links:

• Emergency access accounts - In addition to the recommended action(s), I'd also make sure you have emergency accounts to prevent being locked out of your Azure tenant.
• Raising the Baseline Security for all Organizations in the World

---

If the information helped address your question, please Accept the answer. This will help us and also improve searchability for others in the community who might be researching similar information.

Answer 2

Hi,

Yes, you can disable Security Defaults if you need to.

If the above is useful please click Accept Answer.

Thanks.

-TP

Answer 3

Why are tenants that have conditional access policies in place receiving this notification? is this in error?

Answer 4

@abel.alvarez , @TP can you, please, share your expierence with this?

Can you disable Security Defaults after it is enabled automatically or manually?

And after disabling it, will admin account succesufully login to admin portal? No more pop up messages saying that you must enable security defaults?

I cannot login to admin portal now, because pop up message is telling that I must enable Security Defaults, cant even skip.

We are not ready for forced MFA for all users. (free Azure Ad, using per user MFA for some users)