Fix Microsoft 365 Security Defaults Compatibility with Outlook 2013
Question details
Users need to maintain email connectivity in Outlook 2013 while navigating Microsoft 365 Security Defaults that enforce multifactor authentication.
- Product
- Microsoft 365 and Outlook 2013
- Device & OS
- not provided
- Scenario
- Accessing Microsoft 365 email accounts via Outlook 2013 using SMTP, POP, or IMAP after tenant-wide Security Defaults have been enabled.
- Observed behavior
- Email connections to Microsoft 365 fail or prompt endlessly for passwords because older protocols in Outlook 2013 do not support modern multifactor authentication (MFA).
Before modifying tenant-wide security settings, ensure you have administrative access to the Microsoft Entra admin center and have prepared alternative conditional access policies to protect your organization.
Disable Security Defaults in Microsoft Entra Admin Center
Turn off Security Defaults to temporarily restore legacy authentication for Outlook 2013 connections via SMTP, POP, or IMAP.
While disabling Security Defaults restores access for legacy clients like Outlook 2013, it significantly reduces your organization's protection against identity-related attacks. It is highly recommended to implement Conditional Access policies as a safer replacement before or immediately after taking this step.
Go to the Microsoft Entra admin center (formerly Azure AD) and sign in using an account with Security Administrator privileges.
On the left-hand navigation menu, expand 'Identity', click on 'Overview', and then select 'Properties'.
Scroll to the bottom of the Properties page and click the link labeled 'Manage security defaults'.
In the side panel that opens, toggle the 'Enable security defaults' setting from 'Yes' to 'No'.
Select a reason for disabling the feature (such as 'My organization is using Conditional Access') and click 'Save' to apply the changes.
Upgrade to a Modern Email Client
Migrate from the outdated Outlook 2013 to a newer email client that natively supports modern authentication and MFA.
Upgrade Your Productivity with WPS Office
If your organization is struggling with the limitations and security compatibility issues of outdated software like Office 2013, it may be time for a modern upgrade. WPS Office offers a lightweight, high-performance, and cost-effective alternative to Microsoft Office, keeping your workflow secure and seamless.
Frequently Asked Questions
Why does Outlook 2013 stop working when Microsoft 365 Security Defaults are enabled?
Security Defaults strictly enforce modern multifactor authentication (MFA). Because Outlook 2013 often connects using basic authentication over legacy protocols like SMTP, POP, or IMAP, it cannot process modern MFA login prompts, resulting in denied access and connection failures.
Can I keep Security Defaults enabled and still use Outlook 2013?
Generally, no. Security Defaults apply universally across your tenant and block legacy authentication. To use Outlook 2013, you would need to disable Security Defaults and carefully deploy Conditional Access policies to create specific, secure exceptions for legacy protocols, though upgrading the client is highly recommended instead.
Are my previous security settings automatically restored if I disable Security Defaults?
No. When you disable Security Defaults, any previous security configurations are not automatically reverted. You must manually assess your environment and configure appropriate replacement security policies to ensure your organization remains protected.
