I can't enable security default for the Azure AD.

Question

Hi,

I have Azure AD free.

As stated in this link https://learn.microsoft.com/en-us/azure/active-directory/authentication/concept-mfa-licensing,
I can use/enable the security default.

But when I tried to enable it I got this error message, "It looks you have Classic policies enabled. Enabling Classic policies prevents you from enabling Security defaults"

What should I do? Do I need to disable the classic polices? is it okay to do that?

As per this link https://learn.microsoft.com/en-us/azure/active-directory/fundamentals/concept-fundamentals-security-defaults#conditional-access, I can create the new policy. But apparently, I can't create it because it requires the premium plan.

Thank you.

Answer 1

Yes, you will need to disable any and all CA policies before toggling Security defaults. Whether it is okay to do that, no one here can tell you - depends on what those policies are used for, are they required as per your organization's security requirements, etc. If possible, find out who configured them in the first place, just to be on the safe side.