My 7-Step Guide to Better MFA in Microsoft 365

In this video, I’ll walk you through my 7-step guide to enhancing Multi-Factor Authentication (MFA) in Microsoft 365. We’ll cover everything from migrating away from outdated MFA methods to implementing conditional access policies and authentication strengths. Plus, I’ll show you how to set up breakglass accounts secured with YubiKey for added protection. Join me to boost your security and streamline your MFA process! #Microsoft365 #MFA #cybersecurity

🆓 FREE Facebook Group
From security to productivity apps to getting the best value from your Microsoft 365 investment, join our Microsoft 365 Mastery Group

🆓 FREE Microsoft 365 Guide
Our FREE Guide - Discover 5 things in Microsoft 365 that will save your business time and money….. and one feature that increases your Cyber Security by 99.9%

💻 Want to Work Together?

😁 Follow on Socials
TikTok @bearded365guy
Instagram @bearded365guy

📽️ Video Chapters
00:00 Introduction
00:59 Migrate from Legacy MFA
07:28 MFA Strategy
09:38 Audit Current Environment
13:05 Register Users for MFA
15:24 Conditional Access Policies
18:49 Authentication Strengths
23:39 Emergency Access Accounts
26:33 Configure Yubikey

[dougOptics]

Epic! Another quality video. Not all heroes wear capes.

[ggates]

Always great to consume your thorough and impeccably produced vids. Thanks!

[justepic]

One of your best videos hands down. We implement Yubi for all our clients admin/break accounts and FIN employees. It's the way to go.

[tony]

Nice one Jonathan, thanks for sharing!

[dalewalker]

I'm loving this. One question. What's the difference between when the authenticator gives you two numbers to select on your phone and the other one where you have to type in 6 numbers on your PC? What is the official name for each and which is better?

[defaultne]

Hey, what about App Passwords? I need those for my printers. Cannot find anything in the migration documentation.

[DaysofIresh]

Hey, What happened to existing methods from Legacy, Do users need to register with MFA again, any prompts to users?

[iamweave]

So you disabled SSPR -- so that means users can't reset their own password now?

[thesimpsoid]

Pssst, Jonathan, it’s “deprecated”, not “depreciated.” Subtle difference in spelling but quite different meanings.

[leea]

Agreed, @14:36, Ian is definitely the problem. Have you considered other options for Ian? Like a visit from Joe Pesci, to help understand what it is he does here?