Security defaults in Microsoft Entra ID provide a baseline level of security but are mutually exclusive with Conditional Access policies. When Security defaults are enabled, which is the standard for new tenants, all options to create and manage Conditional Access policies are unavailable (grayed out). To gain the granular control offered by Conditional Access, an administrator must first explicitly disable the tenant-wide Security defaults. This action makes the Conditional Access policy configuration interface accessible, allowing for the creation of custom access rules.

A. Disable the User consent settings: User consent settings manage application permissions and are not a prerequisite for enabling or configuring Conditional Access policies.

C. Configure a multi-factor authentication (MFA) registration policy: An MFA registration policy is typically configured using a Conditional Access policy, not before. Disabling Security defaults is the necessary first step to even create such a policy.

D. Configure password protection for Windows Server Active Directory: This is a separate identity protection feature for hybrid environments and has no direct dependency on or bearing on the ability to configure Conditional Access policies in Azure.

1. Microsoft Entra documentation

"Security defaults in Microsoft Entra ID":

Section: "Disabling security defaults"

Content: "If you want to use Conditional Access policies to replace security defaults

you must disable security defaults... Organizations that choose to implement Conditional Access policies that replace security defaults must disable security defaults." This explicitly states that disabling security defaults is a required step before using Conditional Access.

2. Microsoft Entra documentation

"Conditional Access and security defaults":

Section: "Conditional Access and security defaults"

Content: "If you're a customer using security defaults

you must disable security defaults to enable Conditional Access." This confirms the mutual exclusivity and the required order of operations.