Windows 10: Is it possible to enforce a policy to allow Users to login using MFA eveytime when machine...

I work for an organization as an IT support, we work with Security folks to Test and Secure Machines to an extent where we're trying to make sure when User is away for just a timebeing where machines goes to sleep or at lock screen would require MFA to unlock the device. I'm aware Microsoft yet has not disclosed any material or solution as of now to make it possible. Currently Users are unlocking it using PIN/ Password to login to their profile.

:)

 

MFA for privileged users for windows logon and RDP using Azure MFA

Hi Reader,

Is it possible to implement MFA during windows login and rdp session using azure MFA? If not, what is the best Microsoft product or third-party product to achieve the same?

Thank you.

 

Unable to enforce password policy on multiple machines

I have set the password policy in Windows Tools > Local Security Policy > Security Settings > Account Policies > Password Policy as per the image below on multiple machines earlier in Windows 10 and now in Windows 11.





However, none of the machines ask the user [including me] to change their windows account password after 100 days. Almost a year has passed since the policy was set. The users have local administrator accounts.

I have read a few articles and all mention just setting the options and no other steps. Therefore, I believe the above settings should work. Is there any other obvious step I am missing?

 

ADFS page blocking bypassed MFA for select users

Hi Microsoft Support,

Good day! I need help on how to remove the ADFS page blocking my exempted user not to use MFA. The user or mailbox account is already bypassed on the MFA application. Almost all users are using MFA to login
to portal.office.com.

Thank in advance!