Microsoft MFA - Conditional Access and Legacy MFA

[CyBeRkId2002]

Hi all,

 

Just a quick question that hopefully someone can confirm.

 

We are looking at moving away from the legacy MFA setup (enabling and enforcing on each user) to conditional access. Am I right in thinking that if we have a Conditional Access rule to not require on internal addresses, but the user has the legacy 'Enforced' setting, it will still prompt them for MFA and that I will need to go through and change these all to enabled to function correctly. It certainly seems to be the case, but just wanted to check in case their is something obvious I have missed in my testing.

 

Cheers,

Michael

[Dan2025]

Morning,

 

Yes I believe so, I think mine come up all as 'disabled'. I had one user that kept having to do it while in school, took me a while to remember they were the guinea pig for 2FA before I implemented conditional access and I had enforced it on them.