Entra security defaults

Timeline

From the capture of 25 Apr 2025 18:32 UTC · an earlier observation

Source history: extracted from the page's source file at a commit; shared includes are not expanded

Published timing needs confirmation 29 Jul 2024 most recent · 2 years ago

2 dates
10 undated sections
12 with conditions

22 Oct 2019 7 years agoon or after
- Enabling security defaultsMilestone1 condition
29 Jul 2024 2 years agostarting
- Require all users to register for Microsoft Entra multifactor authenticationMilestoneScope1 condition

Settings and overrides named on this page

Registry values, policies and cmdlets the source mentions, with the dated steps that name them. Read the source for the values to set.

Revoke-AzureADUserAllRefreshToken

Requirements, exceptions and scope

Who should use Conditional Access?Recommendation2 conditions2 passages
Enabling security defaultsRequirement1 passage
Revoking active tokensScopeRecommendation1 condition1 passage
Revoke-AzureADUserAllRefreshToken
Require administrators to do multifactor authenticationRequirementRecommendation3 conditions2 passages
Require users to do multifactor authentication when necessaryExceptionScope6 conditions3 passages
Block legacy authentication protocolsScope1 passage
Protect privileged activities like access to the Azure portalRequirementScopeRecommendation4 passages
Authentication methodsRequirementException1 condition1 passage
Disabling security defaultsRequirementRecommendation2 passages
Move from security defaults to Conditional AccessRequirementRecommendation1 condition3 passages

Extracted automatically from Microsoft's wording. Confirm dates, conditions and whether they apply to you in the source before acting; a month or quarter is a window, not a day.

Observed history and review priority

Captured 25 Apr 2025 18:32 UTC; extracted 19 Oct 12:23 UTC. Extractor: microsoft-1/9/fc65ebeb286710c0a830833db8a7e5de7e266b79981fe9c7c34479be9369ad3c/source-commit.

Earlier unavailable versions and edits between checks are unknown. A missing statement requires review; it does not mean the policy was cancelled. Recovered historical statements are not original revision snapshots.

Retained observations · 16

Compact evidence remains available after full document bodies expire. Earlier extractions can have different vocabulary or capture limitations.

19 Oct 00:53 UTC · 29 candidates
16 Oct 03:33 UTC · 26 candidates
14 Oct 16:35 UTC · 43 candidates
12 Oct 19:35 UTC · 29 candidates
6 Oct 17:57 UTC · 32 candidates
5 Oct 17:50 UTC · 32 candidates
30 Jun 23:52 UTC · 26 candidates
17 Jun 19:27 UTC · 25 candidates
15 Jun 16:45 UTC · 25 candidates
20 May 18:19 UTC · 25 candidates
15 May 23:34 UTC · 25 candidates
30 Apr 16:23 UTC · 24 candidates
26 Jan 21:08 UTC · 24 candidates
26 Jan 19:34 UTC · 24 candidates
21 Jul 2025 18:24 UTC · 23 candidates
25 Apr 2025 18:32 UTC · 26 candidates