Harbour ITMenu

Powered by Office Sentry 2.3.0

You're in the demo. Three fictional clients with made-up people. Look around freely: nothing can be changed, and it all resets every night.Get Office Sentry
Clients/Fabrikam Dental Group

Fabrikam Dental Group

fabrikam.onmicrosoft.com
Monthly review

MFA coverage

Who has set up MFA, who is required to use it, and where the two don't match.

All clients
Download PDFXLSX
Fully protected
28 of 54
52% of enabled members
No MFA at all
1
Not set up and not required
Set up, not required
0
A password alone gets in
Required, not set up
25
Anyone with the password can set it up
Admins with a gap
1
Fix these first
How MFA is required 4Accounts with a gap 26Protected accounts 27Guests 1

How MFA is required 4

1 to review CSV

Setting up MFA and being required to use it are separate. Both are needed.

SettingValue
Security DefaultsOff
Conditional Access policies requiring MFACA001 — Admins: Require phishing-resistant MFA, CA002 — All users: Require MFA
Legacy sign-in blocked by highNothing
Per-user MFANot read: Conditional Access is the way to require MFA on this tenant

Accounts with a gap 26

26 to review CSV

Enabled members who either haven't set up MFA or aren't required to use it. Admins first.

By gap
  1. Required, not set up25
  2. No MFA1
AccountAdmin rolesGapMFA set upRequired by
breakglass@fabrikam.example criticalGlobal AdministratorNo MFANoNothing
What it means: Not set up and not required: the password alone gets in.
aaron.smith@fabrikam.example mediumRequired, not set upNoCA002 — All users: Require MFA
What it means: Will be asked to set up MFA at next sign-in. Until then, anyone with the password can set it up in their place.
aisha.brown@fabrikam.example mediumRequired, not set upNoCA002 — All users: Require MFA
What it means: Will be asked to set up MFA at next sign-in. Until then, anyone with the password can set it up in their place.
amelia.khan@fabrikam.example mediumRequired, not set upNoCA002 — All users: Require MFA
What it means: Will be asked to set up MFA at next sign-in. Until then, anyone with the password can set it up in their place.
arthur.williams@fabrikam.example mediumRequired, not set upNoCA002 — All users: Require MFA
What it means: Will be asked to set up MFA at next sign-in. Until then, anyone with the password can set it up in their place.
ava.jackson@fabrikam.example mediumRequired, not set upNoCA002 — All users: Require MFA
What it means: Will be asked to set up MFA at next sign-in. Until then, anyone with the password can set it up in their place.
ava.moore@fabrikam.example mediumRequired, not set upNoCA002 — All users: Require MFA
What it means: Will be asked to set up MFA at next sign-in. Until then, anyone with the password can set it up in their place.
ava.thomas@fabrikam.example mediumRequired, not set upNoCA002 — All users: Require MFA
What it means: Will be asked to set up MFA at next sign-in. Until then, anyone with the password can set it up in their place.
chloe.jackson@fabrikam.example mediumRequired, not set upNoCA002 — All users: Require MFA
What it means: Will be asked to set up MFA at next sign-in. Until then, anyone with the password can set it up in their place.
george.williams@fabrikam.example mediumRequired, not set upNoCA002 — All users: Require MFA
What it means: Will be asked to set up MFA at next sign-in. Until then, anyone with the password can set it up in their place.
henry.roberts@fabrikam.example mediumRequired, not set upNoCA002 — All users: Require MFA
What it means: Will be asked to set up MFA at next sign-in. Until then, anyone with the password can set it up in their place.
isla.scott@fabrikam.example mediumRequired, not set upNoCA002 — All users: Require MFA
What it means: Will be asked to set up MFA at next sign-in. Until then, anyone with the password can set it up in their place.
jack.lee@fabrikam.example mediumRequired, not set upNoCA002 — All users: Require MFA
What it means: Will be asked to set up MFA at next sign-in. Until then, anyone with the password can set it up in their place.
jack.roberts@fabrikam.example mediumRequired, not set upNoCA002 — All users: Require MFA
What it means: Will be asked to set up MFA at next sign-in. Until then, anyone with the password can set it up in their place.
lily.khan@fabrikam.example mediumRequired, not set upNoCA002 — All users: Require MFA
What it means: Will be asked to set up MFA at next sign-in. Until then, anyone with the password can set it up in their place.
lily.watson@fabrikam.example mediumRequired, not set upNoCA002 — All users: Require MFA
What it means: Will be asked to set up MFA at next sign-in. Until then, anyone with the password can set it up in their place.
lily.white@fabrikam.example mediumRequired, not set upNoCA002 — All users: Require MFA
What it means: Will be asked to set up MFA at next sign-in. Until then, anyone with the password can set it up in their place.
megan.king@fabrikam.example mediumRequired, not set upNoCA002 — All users: Require MFA
What it means: Will be asked to set up MFA at next sign-in. Until then, anyone with the password can set it up in their place.
noah.wood@fabrikam.example mediumRequired, not set upNoCA002 — All users: Require MFA
What it means: Will be asked to set up MFA at next sign-in. Until then, anyone with the password can set it up in their place.
olivia.taylor@fabrikam.example mediumRequired, not set upNoCA002 — All users: Require MFA
What it means: Will be asked to set up MFA at next sign-in. Until then, anyone with the password can set it up in their place.
owen.scott@fabrikam.example mediumRequired, not set upNoCA002 — All users: Require MFA
What it means: Will be asked to set up MFA at next sign-in. Until then, anyone with the password can set it up in their place.
rhys.walker@fabrikam.example mediumRequired, not set upNoCA002 — All users: Require MFA
What it means: Will be asked to set up MFA at next sign-in. Until then, anyone with the password can set it up in their place.
ruby.davies@fabrikam.example mediumRequired, not set upNoCA002 — All users: Require MFA
What it means: Will be asked to set up MFA at next sign-in. Until then, anyone with the password can set it up in their place.
ruby.wood@fabrikam.example mediumRequired, not set upNoCA002 — All users: Require MFA
What it means: Will be asked to set up MFA at next sign-in. Until then, anyone with the password can set it up in their place.
thomas.johnson@fabrikam.example mediumRequired, not set upNoCA002 — All users: Require MFA
What it means: Will be asked to set up MFA at next sign-in. Until then, anyone with the password can set it up in their place.
zara.edwards@fabrikam.example mediumRequired, not set upNoCA002 — All users: Require MFA
What it means: Will be asked to set up MFA at next sign-in. Until then, anyone with the password can set it up in their place.

Protected accounts 27 of 28

CSV
Admin roles: BlankRemove Clear filters
By method
  1. Authenticator app23
  2. Authenticator code14
  3. Windows Hello6
  4. Phone4
  5. Passkey3
AccountAdmin rolesMethodsRequired by
amelia.jackson@fabrikam.exampleAuthenticator app, Authenticator codeCA002 — All users: Require MFA
arthur.lee@fabrikam.exampleWindows Hello, Authenticator appCA002 — All users: Require MFA
callum.turner@fabrikam.examplePasskey, Authenticator appCA002 — All users: Require MFA
ella.evans@fabrikam.examplePasskey, Authenticator appCA002 — All users: Require MFA
ella.hughes@fabrikam.exampleAuthenticator app, Authenticator codeCA002 — All users: Require MFA
ethan.jones@fabrikam.exampleAuthenticator app, Authenticator codeCA002 — All users: Require MFA
freya.evans@fabrikam.examplePasskey, Authenticator appCA002 — All users: Require MFA
george.baker@fabrikam.examplePhoneCA002 — All users: Require MFA
george.walker@fabrikam.exampleWindows Hello, Authenticator appCA002 — All users: Require MFA
jack.ward@fabrikam.exampleAuthenticator app, Authenticator codeCA002 — All users: Require MFA
leo.harrison@fabrikam.exampleAuthenticator app, Authenticator codeCA002 — All users: Require MFA
megan.green@fabrikam.exampleAuthenticator app, Authenticator codeCA002 — All users: Require MFA
noah.harris@fabrikam.exampleAuthenticator app, Authenticator codeCA002 — All users: Require MFA
oscar.smith@fabrikam.exampleWindows Hello, Authenticator appCA002 — All users: Require MFA
owen.khan@fabrikam.exampleWindows Hello, Authenticator appCA002 — All users: Require MFA
owen.patel@fabrikam.exampleAuthenticator app, Authenticator codeCA002 — All users: Require MFA
owen.robinson@fabrikam.examplePhoneCA002 — All users: Require MFA
owen.smith@fabrikam.exampleAuthenticator app, Authenticator codeCA002 — All users: Require MFA
owen.turner@fabrikam.examplePhoneCA002 — All users: Require MFA
priya.williams@fabrikam.exampleWindows Hello, Authenticator appCA002 — All users: Require MFA
rhys.hall@fabrikam.exampleWindows Hello, Authenticator appCA002 — All users: Require MFA
rhys.scott@fabrikam.exampleAuthenticator app, Authenticator codeCA002 — All users: Require MFA
ruby.clark@fabrikam.exampleAuthenticator app, Authenticator codeCA002 — All users: Require MFA
thomas.allen@fabrikam.examplePhoneCA002 — All users: Require MFA
thomas.robinson@fabrikam.exampleAuthenticator app, Authenticator codeCA002 — All users: Require MFA
william.lewis@fabrikam.exampleAuthenticator app, Authenticator codeCA002 — All users: Require MFA
william.wood@fabrikam.exampleAuthenticator app, Authenticator codeCA002 — All users: Require MFA

Guests 1

CSV

Guests set up MFA in their own organisation, so only whether this tenant requires it is shown.

GuestRequired byExcluded from
g#EXT#@fabrikam.exampleCA001 — Admins: Require phishing-resistant MFACA002 — All users: Require MFA, CA008 — All users: 8h sign-in frequency

Data from Users (), MFA registration (), Conditional Access (), Per-user MFA (), Admin roles ().