How to configure MikroTik for a small business: a secure baseline step by step
Update RouterOS, replace the admin user, close management services, set up the firewall and a guest network — with ready-to-use commands.
Read articleMost Microsoft 365 account takeovers start with a stolen password. Multi-factor authentication stops the large majority of them. For small and medium companies without advanced licensing, Microsoft's Security Defaults are the simplest way to require MFA for everyone and block old sign-in protocols.
Before you start: you need a Global Administrator account. Security Defaults cannot be used together with Conditional Access policies — if you already have Conditional Access (Microsoft Entra ID P1/P2), configure MFA there instead. Tell employees in advance: they will need the Microsoft Authenticator app on their phones.
Step 1. Prepare users
Send a short instruction a few days before: what will happen, how to install Microsoft Authenticator, and who to contact for help. Make sure shared mailboxes and service accounts are known.
Step 2. Enable Security Defaults
Open the Microsoft Entra admin center, go to Identity → Overview → Properties → Manage security defaults, set it to Enabled and save.
Step 3. Help users register
At the next sign-in each user is asked to register MFA within 14 days. Track who has registered in Protection → Authentication methods → User registration details and help those who have not.
Step 4. Check old devices and apps
Security Defaults block legacy authentication. Old email clients, printers or scanners that send email with basic SMTP authentication may stop working — move them to modern authentication or a dedicated relay.
A few minutes of setup, a few days of support — and stolen passwords stop being enough.
Need help with this? Contact CySec for a free consultation.