MFA Security Issues

How to Disable MFA for One Microsoft 365 User Without Conditional Access

Maira Mehtab Sep 27, 2026 869 views

Question details

The user needs to disable Multifactor Authentication (MFA) for a single user in a Microsoft 365 Business Standard or Basic tenant where Conditional Access is not available and Security Defaults are enabled.

Product: Microsoft 365
Device & OS: not provided
Scenario: Administrating tenant security settings and managing individual user authentication policies in a Microsoft 365 business environment.
Observed behavior: Administrators need to find supported authentication policies to exempt a single user from MFA without compromising the entire tenant's security setup.

Before you start

Disabling Multifactor Authentication (MFA) for any individual user can significantly reduce their account security. Ensure you fully review your tenant's security settings and alternative protections before making changes to authentication policies.

Solution 1Recommended

Consult Microsoft Entra ID Policies and Specialists

Review your current tenant security defaults and seek guidance from Entra ID specialists for supported authentication exemptions.

When Security Defaults are enabled in Microsoft 365 Business Standard or Basic, MFA is typically enforced across the entire tenant automatically. Disabling it for a single user without Conditional Access requires specific policy adjustments.

Because modifying these foundational settings impacts the security posture of your organization, Microsoft recommends consulting with Entra ID specialists to ensure you maintain a secure environment while meeting operational needs.

Review Security Defaults

Log in to your Microsoft Entra admin center and navigate to the properties section to check if Security Defaults are currently enabled for your tenant.

Verify Licensing Constraints

Confirm whether your current Microsoft 365 Business Standard or Basic license supports granular authentication policies. Typically, per-user exclusions require Conditional Access, which needs a Microsoft Entra ID P1 license.

Consult Microsoft Specialists

Visit the Microsoft Entra ID community at https://learn.microsoft.com/en-us/answers/tags/455/entra-id to ask identity specialists about the best supported method for your specific tenant setup.

Security Warning: Disabling MFA for an individual user reduces security and should only be done after thoroughly reviewing the tenant's security policies.

Free Microsoft Office alternative

Looking for a Simpler Productivity Solution? Try WPS Office

If managing complex Microsoft 365 tenant settings like Entra ID, Security Defaults, and Conditional Access is more than your small business needs, consider switching to WPS Office. It provides a lightweight, highly compatible, and user-friendly alternative to Microsoft Office without the enterprise administrative overhead.

1. Download the Installer: Visit the official WPS Office website and download the free version for your operating system.
2. Install WPS Office: Run the downloaded installer and follow the simple on-screen instructions to set up the software.
3. Open Your Files: Launch WPS Office and open your existing Word, Excel, or PowerPoint files directly with full compatibility.

Free and lightweight office suite for standard daily tasks.Fully compatible with Microsoft Office formats (.docx, .xlsx, .pptx).No complex enterprise tenant administration or enforced security default headaches.Familiar user interface for seamless migration.

microsoft office alternative - wps office

Frequently Asked Questions

Can I disable MFA for one user if Security Defaults are enabled?

No, Security Defaults apply to all users in the tenant uniformly. To manage MFA on a per-user basis, you generally need to disable Security Defaults, which Microsoft strongly discourages unless you are replacing them with Conditional Access policies.

Does Microsoft 365 Business Standard include Conditional Access?

No, Conditional Access requires a Microsoft Entra ID P1 license. This license is included in Microsoft 365 Business Premium, but it is not included in Business Standard or Business Basic.

Why does Microsoft force MFA on my tenant?

Microsoft enforces MFA via Security Defaults to protect user accounts from common identity attacks, such as phishing and password spray attacks, significantly increasing overall tenant security.

Microsoft Office Security Issues