Query: Ensure that 'Require Multifactor Authentication to register or join devices with Microsoft Entra' is set to 'Yes'

Description

This recommendation is only relevant if your subscription is using Per-User MFA. If your organization is licensed to use Conditional Access, the preferred method of requiring MFA to join devices to Entra ID is to use a Conditional Access policy (see additional information below for link).

Query

Tables used in this query:

• azure_tenant
• azuread_device_registration_policy

Controls using this query:

• 5.22 Ensure that 'Require Multifactor Authentication to register or join devices with Microsoft Entra' is set to 'Yes'
• Ensure that 'Require Multifactor Authentication to register or join devices with Microsoft Entra' is set to 'Yes'

SQL