Comments on: Multi-factor Authentication by Default for Administrators in Azure AD and Office 365

By: Natalie Frith

Natalie Frith — Thu, 04 Feb 2021 22:10:56 +0000

Comments for this blog post are now closed; please contact team@practical365.com for any additional questions and comments, thank you.

By: Jason

Jason — Thu, 06 Jun 2019 21:26:08 +0000

In reply to andrew. Have you become a Microsoft Cloud Partner and then use the Partner portal to connect to each tenant?

By: Sankqr

Sankqr — Wed, 10 Apr 2019 12:09:42 +0000

We have implemented conditional access policy and it is not working for exchange admin and it works only for global admin

By: What Happens When MFA Fails? - Office 365 for IT Pros

What Happens When MFA Fails? - Office 365 for IT Pros — Tue, 20 Nov 2018 10:12:01 +0000

[…] be used in case of emergency and other administrator accounts are unavailable for some reason. See this article for a discussion on the […]

By: andrew

andrew — Wed, 15 Aug 2018 14:16:16 +0000

The problem we have is we are an MSP and have about 20 people on our service desk. We manage multiple customers office 365 portals. We also have several engineers out and about that need to sometimes access office 365 portals for our customers. Having MFA for all global admin accounts for those customers is just not practical. Is just having one global admin account with a very complex password secure enough?

By: Robert Milner

Robert Milner — Thu, 19 Jul 2018 14:12:25 +0000

This is a really good idea, but what would happen to the Global Admin account that is used for Azure AD Connect as you cannot use MFA for this account?

By: sukumar

sukumar — Fri, 13 Jul 2018 22:29:40 +0000

We have a few SharePoint admin service accounts .. What is the recommended option for MFA on service accounts ? Do we implement MFA on service accounts ?

By: Sagar

Sagar — Fri, 13 Jul 2018 11:35:42 +0000

Can we reset MFA via script or Graph API instead doing it via GUI.

Is MFA Reset the best practice , most of the times we have to perform MFA reset when users are not able to connect to Mobile Outlook app or just in case if we are not able to authenticate of phone number change scenario.

We are using Azure Cloud MFA enforced via Conditional Access

By: Paul Cunningham

Paul Cunningham — Tue, 10 Jul 2018 11:24:35 +0000

In reply to Gabor. I'm not really sure what you're asking me. If you've implemented MFA already you can opt out/turn off the new baseline policy before it goes live. It's a decision for you to make.

By: Gabor

Gabor — Tue, 10 Jul 2018 09:22:13 +0000

What if the company uses federated identity + on-premises MFA server, so how does this affect SharePoint / Exchange / Conditional access administrators if MFA server is not configured for those Admins? Thank you for your answer in advance.