Why would you enable MFA on Shared Mailboxes

James Boyle (Student) 0 Reputation points
2023-08-15T13:46:46.1233333+00:00

When you go into the Multifactor Verification page on our 365 account, it shows Shared Mailboxes in here on the list https://account.activedirectory.windowsazure.com/UserManagement/MultifactorVerification.aspx

I'm a bit confused by this as surely MFA wouldn't work on a shared mailbox as users do not log on to those mailboxes directly.

We are needing to up our Microsoft Secure Score so I am enabling MFA on all our accounts, but how will this work with a shared mailbox, does anyone have any ideas?

Thanks

Outlook | Windows | Classic Outlook for Windows | For business
Microsoft 365 and Office | Install, redeem, activate | For business | Windows

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Vasil Michev 127.6K Reputation points MVP Volunteer Moderator
    2023-08-15T15:13:12.79+00:00

    There is no need to enable them on shared mailboxes. The reason they are showing under said UI is because each mailbox has a corresponding user account, which in turn is what Secure score wants you to protect. However, it does not care whether the account is actually associated with a real user. For the same reason, you will find accounts associated with room mailboxes or Teams Room systems therein. Just ignore them, add exception in Secure score if you are so worried about the % :)

    Was this answer helpful?

    1 person found this answer helpful.
    0 comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.