If you see this
Needless to say I am the “organization” and did not set this policy, MS did it all by itself without even notifying me of the change.
Found this worked!
By default this is set to ‘Not Configured’ change to Enabled and you should be all set.