question

Septovan-0676 avatar image
0 Votes"
Septovan-0676 asked

I can't enable security default for the Azure AD.

Hi,

I have Azure AD free.
117035-image.png

As stated in this link https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-mfa-licensing,
I can use/enable the security default.
117007-image.png

But when I tried to enable it I got this error message, "It looks you have Classic policies enabled. Enabling Classic policies prevents you from enabling Security defaults"
117061-image.png

What should I do? Do I need to disable the classic polices? is it okay to do that?

As per this link https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/concept-fundamentals-security-defaults#conditional-access, I can create the new policy. But apparently, I can't create it because it requires the premium plan.

Thank you.


azure-active-directory
image.png (2.5 KiB)
image.png (22.3 KiB)
image.png (24.4 KiB)
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

1 Answer

michev avatar image
0 Votes"
michev answered michev commented

Yes, you will need to disable any and all CA policies before toggling Security defaults. Whether it is okay to do that, no one here can tell you - depends on what those policies are used for, are they required as per your organization's security requirements, etc. If possible, find out who configured them in the first place, just to be on the safe side.

· 4
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Do you know what are these policies used for?

  • [Outlook Service for OneDrive] Device policy

  • [Office 365 SharePoint Online] Device policy

  • [Outlook Service for Exchange] Device policy

  • [Office 365 Exchange Online] Device policy

Thank you.

0 Votes 0 ·

Do you think if I disable those policies, the rules are covered by the Security defaults?

0 Votes 0 ·
Show more comments