Skip to main content

Remediation

From Azure Portal​

To enable security defaults in your directory:

  1. In the Azure portal, open the portal menu.
  2. Browse to Microsoft Entra ID > Properties.
  3. Select Manage security defaults.
  4. Under Security defaults, select Enabled (recommended).
  5. Select Save.

From PowerShell​

Connect-MgGraph `
    -Scopes "Policy.ReadWrite.ApplicationConfiguration"

Update-MgPolicyIdentitySecurityDefaultEnforcementPolicy `
    -IsEnabled $true

(Get-MgPolicyIdentitySecurityDefaultEnforcementPolicy).IsEnabled

From Azure CLI​

az rest \
    --method patch \
    --url 'https://graph.microsoft.com/v1.0/policies/identitySecurityDefaultsEnforcementPolicy' \
    --body '{"isEnabled":true}'

az rest \
    --method get \
    --url 'https://graph.microsoft.com/v1.0/policies/identitySecurityDefaultsEnforcementPolicy' \
    --query "isEnabled"