Hi,
I work for a medium size MAT, I've just completed a migration of all of our schools individual O365 tenants to a single MAT tenant. This has made management much easier for me working at the centre however it has highlighted some bad practice around password security for a small number of staff. Currently I only have the default MFA enforced for administrators policy enabled, but i'm now looking to possibly roll this out to all users. I'm leaning more towards azure conditional access rather than just the default MFA enabled/disabled in O365, however there's an additional licencing cost to consider with this option.
Has anyone gone through this process before? How did it go for you and what policy did you implement on MFA?
For those who have enabled MFA by default for all users, were there any unexpected issues you've had to overcome?