Not a problem for me for having MFA turned on. But I'm unable to exclude my resource accounts that are been used by the MTR rooms. That aren't able to support MFA seen the shared nature. Can this be fixed asap ... or can someone explain me how I can accomplish that. As you can see I can alter the first policy . .. but the second one I can't alter at all ... I've tried to change multiple things here ... but all ending up with the same error msg above. Blocking me to use my MTR rooms and demo. Looking forward to your insigths and guidanc

Hi @Joachim Henrard , Thanks for reaching out to Microsoft Q&A. This behavior has been happening with tenants that have a @microsoft.com email account set as technical contact for the tenant or that has the very same type of account assigned with an administrative role, such as Global Admin, Application Admin, etc. Please, check if that's your case and let me know about your findings. Thanks, Fabio

Dear Fabio, No @microsoft.com accounts have been linked to this tenant. Only @M365x33573389.OnMicrosoft.com accounts. Regards Joachim Henrard

@Joachim Henrard let me know if you managed to open a support ticket with Microsoft and if you still need any help with this issue. Thanks, Fabio

I have the same problem did you fixed it?

How to adjust "Multifactor authentication for Microsoft partners and vendors" policy on DEMO TENNANT

Joachim Henrard 40

Not a problem for me for having MFA turned on. But I'm unable to exclude my resource accounts that are been used by the MTR rooms. That aren't able to support MFA seen the shared nature.

Can this be fixed asap ... or can someone explain me how I can accomplish that.

User's image

As you can see I can alter the first policy . .. but the second one I can't alter at all ...

User's image

I've tried to change multiple things here ... but all ending up with the same error msg above.

Blocking me to use my MTR rooms and demo.

Looking forward to your insigths and guidanc

Andrew Deitering 10 Reputation points

2024-03-27T20:50:20.6+00:00

I'm having the same issue with a demo tenant. This just started. We need to be able to adjust this policy.
Fabio Andrade 640 Reputation points Microsoft Employee

2024-04-01T21:16:10.89+00:00

@Andrew Deitering

Thanks for sharing it.

You'll really need to reach out to our customer support team to help you with this request.

Let me know if you were able to create it or of you need any help to do so.

Thanks,

Fabio

4 answers

Fabio Andrade 640 Reputation points Microsoft Employee

2024-03-26T22:11:01.25+00:00

Hi @Joachim Henrard, Thanks for reaching out to Microsoft Q&A.

This behavior has been happening with tenants that have a @microsoft.com email account set as technical contact for the tenant or that has the very same type of account assigned with an administrative role, such as Global Admin, Application Admin, etc.

Please, check if that's your case and let me know about your findings.

Thanks,

Fabio
Please sign in to rate this answer.
LiweiTian-MSFT 14,530 Reputation points Microsoft Vendor

2024-03-27T06:53:45.71+00:00

Hi @Joachim Henrard

If the reply is helpful to you, please try to mark it as an answer to help others who encounter the same issue and read this thread. Thank you for your understanding and patience!
Sign in to comment
Joachim Henrard 40 Reputation points

2024-03-27T11:24:25.2966667+00:00

Dear Fabio,

No @microsoft.com accounts have been linked to this tenant.

Only @M365x33573389.OnMicrosoft.com accounts.

Regards

Joachim Henrard
Please sign in to rate this answer.
Fabio Andrade 640 Reputation points Microsoft Employee

2024-03-27T18:31:40.28+00:00

Thanks for the confirmation, @Joachim Henrard

You'll need to open a support request with Microsoft for further assistance on this one. I'm sorry I could not help you using the Q&A channel, but that error needs to be checked by our support engineers since the CA policy was enforced by Microsoft. Here's how you can create the request:

Sign in to the Microsoft Entra admin center as at least a Service Support Administrator.

Browse to Learn & support > New support request.

Follow the prompts to provide us with information about the problem you're having.

Next, we'll walk you through some steps to gather information about your problem and help you solve it. Each step is described in the following sections.

https://learn.microsoft.com/en-us/entra/fundamentals/how-to-get-support#to-open-a-support-request-in-microsoft-entra-id

Thanks,

Fabio

Joachim Henrard 40 Reputation points

2024-04-04T08:25:44.46+00:00

Case opened today

Support request ID 2404040050001044

Fabio Andrade 640 Reputation points Microsoft Employee

2024-04-04T20:51:32.81+00:00

@Joachim Henrard thanks for the update.

Let me know if you need further help from my side.

Thanks,

Fabio
Sign in to comment
Fabio Andrade 640 Reputation points Microsoft Employee

2024-04-03T22:56:45.1833333+00:00

@Joachim Henrard let me know if you managed to open a support ticket with Microsoft and if you still need any help with this issue.

Thanks,

Fabio
Please sign in to rate this answer.

0 comments No comments
Sign in to comment
Patti Fernandez 0 Reputation points

2024-04-20T10:04:33.7833333+00:00

I have the same problem did you fixed it?
Please sign in to rate this answer.
Fabio Andrade 640 Reputation points Microsoft Employee

2024-04-22T23:25:39.65+00:00

Hi @Patti Fernandez

Unfortunately, the only way to resolve this issue if you have no Microsoft user account associated to your tenant is to open a support ticket with Microsoft.

Thanks,

Fabio

XML 0 Reputation points

2024-04-29T08:06:28.5466667+00:00

Hi Fabio, thanks for your support. I have the same issue, if I got a Microsoft user account associated to my tenant as technical contact, could we have any solutions except submit a request?

Fabio Andrade 640 Reputation points Microsoft Employee

2024-04-29T22:43:45.08+00:00

Hi @XML

You will need to change that technical contact to a different account.

Microsoft has deployed that CA policy to all the tenants that has a Microsoft account associated with it, unfortunately there's no other way to y pass it.

Thanks,

Fabio
Sign in to comment