Opt-out from 2FA default settings

Question

Hi

I just logged in to my Microsoft 365 account and I got a message that Microsoft will enable 2FA default settings, which would result Microsoft demanding 2FA info with Microsoft Authenticator app from users.

I am global admin in our tenant.

We just added Microsoft 365 F3 -licenses to our tenant, which enabled Intune/Endpoint Manager to our tenant.

We are already using 2FA (manually set) and I do not like Microsoft to make any changes to our settings.

How can I opt-out from these Microsoft automatically set 2FA defaults?

Answer 1

Hello IMK

if i understand it right you want to disable the default security settings.

Go to portal.azure.com ; select your Azure AD ; properties ; manage security defaults

and disable.

Regards

Answer 2

Hi

And thaks for your answer!

I did check that setting and it is already disabled.

But still, every time I login, I get this promt that Microsoft will enable security defaults in 9 days.

I don't want this! I want to control myself, what happens in our tenant..

Answer 3

I found a way.

It seems that if I create anykind of Conditional Access policy, security defaults can't be enabled.

I created "MFA for all" policy because MFA was already enabled to everyone manually, so no actual change there.