Administrators without MFA
AI summary
Administrators without multi-factor authentication represent a security risk that can lead to unauthorized access. Rencore Governance detects these accounts and lets you set up an automation to notify administrators and enforce MFA activation.
What it detects
Shows administrators that have not activated multi factor authentication.
Why it matters
Enabling Multi-Factor AuthenticationMultifactor authenticationMultifactor authentication asks a user for a second form of verification, such as a code on their phone or a fingerprint, in addition to the password.Read more (MFA) for admin accounts significantly enhances security by requiring multiple forms of verification, reducing the risk of unauthorized access. Enforcing MFA ensures that users adhere to best practices, protecting sensitive data and systems from potential breaches. Set up an AutomationAutomationAn automation is a workflow Rencore Governance runs on inventory objects when a trigger fires.Read more in Rencore Governance to send out a notification to respective users and inform/enforce them to activate MFA for their account.
The rule
Every User that has any Role Members and any User Registration Credentials where Default MFA Method equals 'none'
UserIn Rencore Governance
Details
| Applies to | User |
|---|---|
| Connector | Microsoft 365 |
| Severity | High |
| Category | Security |
| Recommended | No |
| Recommended automation | None |
| License type | Standard |
Related policies
Other policies that check User objects:
- Copilot adoption opportunity - E3/E5 users (Medium)
- Copilot license assigned to disabled account (High)
- Inactive Copilot users - 30 days (Medium)
- Excessive draft agent creation pattern (Medium)
- External users (Information)
- External users with pending acceptance (Low)
- Users with Power Platform Premium license (Information)
- Users with E3 license not using Outlook in last 12 month (Low)
- Users with passwords not changed in last 6 months (Medium)
- Disabled user accounts (Medium)
- Admin accounts with an Office 365 E3 license assigned (Medium)
- External users invited 3 month ago with pending acceptance (Low)
- Disabled user accounts with assigned licenses (High)
- Global administrators without MFA (High)
- Guest users with a Dynamics license assigned (Medium)
- Inactive external users (Medium)
- Inactive internal users (Medium)
- Over-licensed user accounts (High)
- Users who are creating Microsoft Loop Teams components (Medium)
Frequently asked questions
What does the administrators without MFA policy detect?
The Administrators without MFA policy shows administrators that have not activated multi factor authentication.
Which objects does the administrators without MFA policy check?
The Administrators without MFA policy checks User objects from the Microsoft 365 inventory and reports each one that matches its rule as a violation.
How severe is a violation of the administrators without MFA policy?
Violations of the Administrators without MFA policy have High severity. The policy is in the Security category.
Which module includes the administrators without MFA policy?
The Administrators without MFA policy comes with the Microsoft 365 connector in the Digital Workplace module of Rencore Governance, which every Plan includes.
Was this page helpful?
Thanks for the feedback.
Thanks. What was wrong?