Exercise - Work with security defaults

Completed

Enabling security defaults

To enable security defaults in your directory:

  1. Browse to the Microsoft Entra admin center and sign in as a security administrator, Conditional Access administrator, or global administrator.

  2. Select the Show portal menu hamburger icon and then select Identity - Overview.

    Screenshot of the Microsoft Entra admin center menu with Identity - Overview - Properties selected.

  3. In the left navigation, in the Manage section, select Properties.

  4. At the bottom of the Properties dialog, select Manage Security defaults.

  5. Set the Enable Security defaults toggle to Yes.

  6. Select Save.

Disabling security defaults

Organizations that choose to implement Conditional Access policies that replace security defaults must disable security defaults.

To disable security defaults in your directory:

  1. Browse to the Azure portal and sign in using a Global administrator account for the directory.

  2. Select the Show portal menu hamburger icon and then select Microsoft Entra ID.

  3. At the bottom of the Properties dialog, select Manage Security defaults.

  4. Set the Enable security defaults toggle to No.

    Screenshot of the security defaults being disabled and selection of the required reason for disabling.

  5. Select Save.