ACS Blog

Microsoft Confirms Mandatory Entra ID Security Defaults Rollout Hitting Remaining Microsoft 365 Small Business Tenants in May 2026

Illustration for: Microsoft Confirms Mandatory Entra ID Security Defaults Rollout Hitting Remaining Microsoft 365 Small Business Tenants in May 2026

Microsoft Is Forcing You to Upgrade Your M365 Security

This is big news for small businesses using Microsoft 365: Microsoft is forcing certain security defaults on your tenant, and you need to be ready.

What Happened

Starting this month, Microsoft is enforcing some new security defaults on all M365 tenants. They’re rolling out features like conditional access and multi-factor authentication whether you like it or not. And let me tell you, if you haven’t been doing these things already, you’ve been living dangerously.

Conditional access means that certain conditions must be met before users can log in to your system. Multi-factor authentication (MFA) adds an extra layer of security by requiring more than just a password to gain access. These are not optional anymore; Microsoft is forcing the issue because, frankly, they’ve taken long enough.

What This Means for Your Business

The villain here is downtime and breaches. If you’re still without these security measures, your business could be vulnerable to attacks that could cost you more than just time and money; it could damage your reputation. You don’t want to be the one who gets hacked because they didn’t secure their M365 tenant properly.

These new defaults are a must-do for every small business owner using Microsoft 365. It’s not about being annoyed by an extra step in logging in; it’s about protecting your business from potential threats that could paralyze you.

What To Do This Week

  • Check if these security defaults are already enabled: Go into the Microsoft 365 admin center and verify which settings are active. You can find this under “Security & Compliance” > “Conditional Access.”
  • Enable any missing features: If you’re not using conditional access or MFA, now’s the time to set them up. It might seem like a hassle, but it’s better than dealing with a breach.
  • Talk to your team about these changes: Make sure everyone is aware of the new security measures and knows how they affect their logins. You don’t want anyone getting locked out because they weren’t prepared for the extra steps.

Questions about how this affects your setup? Schedule a free IT consultation and we’ll walk through it with you.