Update: This is old and you should now use Security Defaults or conditional access if you have it. See https://cloudrun.co.uk/office365/increase-your-office-365-security-for-free-with-security-defaults-for-admins/ Multi-factor authentication is essential nowadays…