Windows 10: Enabled MFA for "Run as Administrator" on Azure AD Joined Win11 Devices

I was wondering if there is a way to enable MFA for "Run as Administrator". For example if I need to run command line as an admin, I would like protect the sign in with MFA. At the moment the credentials screen pops up and I enter my details and the program launches with Admin privileges.All devices are Win11 and Azure AD Joined and managed with Microsoft endpoint manager Intune.

:)

 

Image W10 workstations for Azure AD join?

Hi All,

I want to image Windows 10; but more importantly I need to join Azure AD 'Out of the Box'!

I don't have a 'master' Azure AD account. I am not even sure that such a thing exits, e.g.: the Administrator account on a standard Active Directory Domain.

Where should I be looking for configuration, where it comes to Azure AD automatic joining?

My thoughts are PowerShell DST! But that is just a rumour.

Any suggestions would be amazing.

Regards,

Davo

 

WIndows 10 Activation Issue / Azure AD joined device

Couple of quick bullets:

• We are a Microsoft 365 E3 customer which includes Windows 10 Enterprise.
• The machine in question is a brand new Dell Optiplex with Windows 10 Version 10.0.19041.388. There have been no hardware changes.
• Device is Azure AD joined, and the joined user does NOT have MFA enabled
  

User is seeing prompt in the lower right corner of the desktop showing that Windows is not Activated. Navigating to the Activation tool, the following is displayed:

Edition: Windows 10 Enterprise

Subscription: Windows 10 Enterprise Subscription is active

Activation: Windows is not activated

Windows reported that the hardware of your device has changed. 0xC004F211

Attempts to use the Troubleshooter fail with a prompt to contact the system administrator (me).

The article
here states that there is an exception path which can be accessed via Start > Settings > Update & Security > Activation and then to Select Troubleshoot and states that if the troubleshooter cannot resolve the issue I will see a link to reactivate after
a hardware change.

1) There has been no hardware change

2) The troubleshooter provides no link

Is anyone able to assist in identifying how I can successfully activate Windows on this device?

 

Activating Azure MFA on RD Web Access

Hi there

I have been oscillating over this issue for a couple of days now - am hoping to get some expert advice here.

I am attempting to invoke Azure-AD MFA at the RD Web Access login.

Running

Server #1 - Windows Server 2016 - RD Gateway

Server #2 - Windows Server 2016 - Azure AD authentication server

I have the requisite global administrator access and Azure licence.

Initially I was inclined to believe that I needed to set #2 as the NPS, however that solution appears to only function once inside the RD Web Access server.

MFA Server is no longer an option.

The solution that on the surface appears to be required is the Azure Proxy Connector.

However, I was hoping to get some conclusive guidance on which solution is correct here; the ones I have listed may not be the solution needed.

Happy to provide whatever info I can

Thank you,