'%3e%3cpath%20d='M8%200C12.4183%200%2016%203.58172%2016%208C16%2012.4183%2012.4183%2016%208%2016C3.58172%2016%200%2012.4183%200%208C0%203.58172%203.58172%200%208%200ZM11.6162%204.38379C11.2257%203.99337%2010.5927%203.99338%2010.2021%204.38379L8%206.58594L5.79785%204.38379C5.40732%203.99334%204.77429%203.99329%204.38379%204.38379C3.99331%204.77429%203.99335%205.40733%204.38379%205.79785L6.58594%208L4.38379%2010.2021C3.99348%2010.5927%203.99341%2011.2257%204.38379%2011.6162C4.77426%2012.0066%205.40734%2012.0065%205.79785%2011.6162L8%209.41406L10.2021%2011.6162C10.5927%2012.0066%2011.2257%2012.0067%2011.6162%2011.6162C12.0067%2011.2257%2012.0066%2010.5927%2011.6162%2010.2021L9.41406%208L11.6162%205.79785C12.0066%205.40735%2012.0066%204.77429%2011.6162%204.38379Z'%20fill='%23080E17'%20fill-opacity='0.46'/%3e%3c/g%3e%3cdefs%3e%3cclipPath%20id='clip0_3761_713'%3e%3crect%20width='16'%20height='16'%20fill='white'/%3e%3c/clipPath%3e%3c/defs%3e%3c/svg%3e)
How to Handle Microsoft 365 Security Defaults for an Unused Tenant
Question details
The user is receiving notifications that security defaults and multifactor authentication (MFA) are being enabled for a Microsoft 365 tenant that is unused or associated with a personal or former charity account.
- Product
- Microsoft 365
- Device & OS
- not provided
- Scenario
- Managing administrative security settings or closing a legacy Microsoft 365 business tenant account.
- Observed behavior
- Microsoft is enforcing security defaults requiring multifactor authentication on a tenant the user no longer actively manages or uses.
Ensure you have the administrator email address and password associated with the Microsoft 365 tenant. If you do not have these, try to locate any recovery email addresses tied to the account.
Review and Close the Unused Tenant via Microsoft 365 Admin Center
Use this method if you have the administrator credentials and want to close the unused tenant permanently to stop security notifications.
Even if your account was set up for personal or charity use, work or school accounts are hosted in a Microsoft 365 business tenant. To stop security prompts for an unused account, the best approach is to formally close the tenant.
Navigate to https://admin.microsoft.com in your web browser and sign in using the administrator email and password (often ending in .onmicrosoft.com).
Go to the 'Billing' section in the left-hand menu, select 'Your products', and cancel any active subscriptions tied to the tenant.
Navigate to 'Settings', select 'Org settings', and follow the official Microsoft prompts to delete the directory and fully close the tenant.
Contact Microsoft Business Support for Lost Credentials
Follow these steps if you need to close the tenant but have lost the administrator credentials.
Configure Security Defaults if the Tenant is Still Needed
If you determine that you still need the tenant for software access or Teams, you must configure the required security defaults.
Switch to WPS Office for a Subscription-Free Experience
If you are closing your unused Microsoft 365 tenant and want to avoid complex IT management while maintaining top-tier productivity, WPS Office is an excellent, lightweight alternative.
- 1. Download WPS Office: Visit the official WPS Office website and download the free installation package for your operating system.
- 2. Install the Software: Run the installer and follow the simple on-screen instructions to set up the software on your computer.
- 3. Open Your Files: Launch WPS Office and instantly open your existing .docx, .xlsx, and .pptx files to continue working seamlessly.
Frequently Asked Questions
Why is Microsoft asking for security defaults on a personal or charity account?
Even if an account is used for personal or charitable purposes, Microsoft 365 work or school accounts are hosted on the backend as a business tenant. Microsoft mandates enterprise-level security, including security defaults and multifactor authentication (MFA), for all business tenants to ensure data safety.
How do I figure out my administrator email address?
The administrator email address often ends with '.onmicrosoft.com' (e.g., alias@yourcharity.onmicrosoft.com). It may also be the primary email address that was used when the organization initially registered for Microsoft services.
Can I permanently ignore the security defaults notification?
No. While administrators may have the option to temporarily postpone the enforcement of security defaults, Microsoft will eventually require multifactor authentication to be enabled for all accounts within a business tenant to maintain access.
