Windows 10: 2FA with MS Authenticator App for Windows 10/11 Login

Hi, I hope someone can help me with this issue.I have a Windows 10 Pro joined to Azure AD with a Corporate Account and Business license Azure AD P1 and Intune.Is there a way to use the Ms Auth App as 2FA in the Windows 10 login?I want each time the user logon to Windows 10; he/she has to validate her identity with the App using his corporate account.If so, which Azure AD license is required, and there's a tutorial?I appreciate any help you can provide.

:)

 

Windows 11 2FA

Hi Mark124pl,

I'm Dyari. Thanks for reaching out. I will be happy to assist you in this regard.

May I know what solution are you referring to?

If you are using Microsoft Account to login into Windows 11, you can enable 2FA by following these procedures:

https://support.microsoft.com/en-us/account-bil...

If your Microsoft account has 2FA on it and you want to disable it, go to the Security basics page and sign in with your Microsoft account > Select More security options > Under Two-step verification, choose Set up two-step verification to turn it on, or choose Turn off two-step verification to turn it off.

Microsoft has an Authenticator app, kindly check out the link below to know How to use the Microsoft Authenticator app:

https://support.microsoft.com/en-us/account-bil...

If you want to set more than a password to your Windows 11 login, please check out the links below:

https://support.microsoft.com/en-us/windows/cha...

https://support.microsoft.com/en-us/windows/win...

To enable BitLocker to encrypt your hard drives:

https://support.microsoft.com/en-us/windows/tur....

Please let me know if you need further assistance and keep me updated.

 

Managing 2FA Trusted Devices

When I signed in after turning on 2 factor authentication, 2FA, for my Microsoft account I was prompted with an option to trust my device and avoid having to enter the 2FA code when you login to my MS account or MS apps. My questions are 1) how do you determine which of your devices are trusted and 2) how do you un-trust a device and force the use of 2FA for login. I am using Windows 10 Pro Version 20H2.

 

Microsoft Authenticator and VPN 2FA

Hi,

I joined a new company few days ago. They require 2FA enabled on the company Microsoft account. I do not mind that. Problem is, that 2FA is requested also when connecting to the company VPN. Again, easily setup with Microsoft Authenticator - when you try to connect to the VPN (via stock windows experience), you just confirm the login on your phone and you are connected to the VPN.

My problem is though, that I do not have Google services on my android phone (I use LineageOS), so the Microsoft Authenticator does not work. Is there any way to set it up on my machine, so when trying to connect to the VPN, it would ask for the 2FA code to be input manually?

Thanks.