How can Admins Change the Default MFA Method for Microsoft 365 Users
Admins can change the default MFA method for Microsoft 365 users, effectively bolstering the security of users who rely on less secure MFA methods.
8 min read
If Microsoft Entra Connect Sync is still running solely for device synchronization, you're maintaining infrastructure you may no longer need. This guide shows you how to configure Device Sync in Microsoft Entra Cloud Sync using the Microsoft Entra admin center and Microsoft Graph to synchronize Active Directory computer objects without relying on Microsoft Entra Connect Sync.
Microsoft has officially announced that passkeys will become the default authentication method in Microsoft Entra, replacing Microsoft-provided SMS and voice authentication. The change begins rolling out on September 1, 2026, with the transition completing on February 1, 2027.
Microsoft is adding two new PowerShell settings that let admins control who can join federated group chats in Microsoft Teams. These settings are disabled by default and will roll out globally between late July and late September 2026.
Microsoft has introduced cross-tenant message recall in Exchange Online. This feature allows users to recall emails sent to external Microsoft 365 tenants. It is disabled by default and works only when the receiving organization explicitly enables it and adds the sender’s Microsoft Entra tenant IDs to an allow list via PowerShell. The rollout begins in mid-August 2026, delivering a secure recall experience for cross-organization collaboration.
Microsoft’s Network Data Security helps protect sensitive company data when people use AI tools, cloud apps, or websites outside of managed Microsoft 365 apps. It checks data in real time as it is being uploaded, pasted, or shared, and can block it if it breaks company rules. It works by combining Microsoft Purview’s data protection with Microsoft Entra’s network control to make sure sensitive information doesn’t accidentally leave the organization.
Microsoft recently introduced manual incident creation in preview for Defender to help security teams investigate threats beyond automated detections. Analysts can now instantly track, manage, and correlate user reported threats and other security findings, even when no alert is generated automatically.
Struggling to automate secure monitor manage M365?
Try AdminDroid for Free!