cannot Disable security defaults.. save button greyed out

Question

hi, I am a "global Administrator" of a M365 domain with a few users. im trying to disable the Security defaults for this domain in Entra but for some reason i cannot save the setting "disabled" the save button is greyed out

what am i doing wrong here? i do not want to use MS Authenticator and MFA for several reasons and simply want to disable it completely.. but i cannot SAVE the settings due to it being greyed out.. Global admins should have access to these settings ?

Andre

Answer 1

Hi @Andre Brouwer , if the "Save" button is greyed out when you try to disable Security Defaults in Azure AD, it's likely because there are some required settings that have not been configured yet. Here are a few things you can check:

1. Make sure that all the required settings have been configured. To disable Security Defaults, you need to configure the following settings:
   • All users must have a valid mobile phone number in their profile.
   • All users must have a valid alternative email address in their profile.
   • All users must be enrolled in Azure AD Multi-Factor Authentication (MFA).
   • If any of these settings are missing or incomplete, the "Save" button will be greyed out.
2. Check if there are any conditional access policies that require MFA. If there are any conditional access policies that require MFA, you will not be able to disable Security Defaults until those policies are updated.
3. Make sure that you have the necessary permissions to modify the Security Defaults settings. As a global administrator, you should have the necessary permissions, but it's possible that your permissions have been restricted by another administrator.

Please let me know if you have any questions and I can help you further.

If this answer helps you please mark "Accept Answer" so other users can reference it.

Thank you,

James