Windows 10: Multi-factor Unlock

I'm testing various options for multi-factor unlock, I'm applying the settings via Microsoft Endpoint and I can't find a great deal of information about troubleshooting trusted signal rules.


Applying rules that enable the 2nd factor to be my mobile phone works:

OMA-URIValue
./Device/Vendor/MSFT/PassportForWork/DeviceUnlock/GroupA{D6886603-9D2F-4EB2-B667-1971041FA96B},{BEC09223-B018-416D-A0AC-523971B639F5},{8AF662BF-65A0-4D0A-A540-A338A999D36F}
./Device/Vendor/MSFT/PassportForWork/DeviceUnlock/GroupB{D6886603-9D2F-4EB2-B667-1971041FA96B},{27FBDB57-B613-4AF2-9D7E-4FA7A66C21AD}
./Device/Vendor/MSFT/PassportForWork/DeviceUnlock/Plugins<rule schemaVersion="1.0"><signal type="bluetooth" scenario="Authentication" classOfDevice="512" rssiMin="-10" rssiMaxDelta="-10"/></rule>


I can't get the other signal types to work though. I've tried the following for wireless detection and network detection and neither worked although I was connected to a wireless network at the time:

OMA-URIValue
./Device/Vendor/MSFT/PassportForWork/DeviceUnlock/Plugins<rule schemaVersion="1.0"><signal type="wifi"><ssid>myssid</ssid><security>WPA2-Enterprise</security></signal></rule>
OMA-URIValue
./Device/Vendor/MSFT/PassportForWork/DeviceUnlock/Plugins<rule schemaVersion="1.0"><signal type="ipConfig"><ipv4DnsServer>192.168.1.2</ipv4DnsServer></signal></rule>


I can see what methods were used for authentication in Event Viewer / Application and Services Logs / Microsoft / Windows / Hello for Business / Operational but I can't see how the signal rules were interpreted and why they are failing as a 2nd form of authentication.


Where do I start to look at troublshooting how the trusted signal rules are validated?

:)

 

log to a computer using multi-factor authentication server

Hi,



Thank you for writing to Microsoft Community Forums.



We understand your concern as you are looking options for implementing two factor authentication with the Azure multi-factor authentication sever.
I would suggest you to refer the article on
Getting started with the Azure Multi-Factor Authentication Server which contains information that could prove itself useful to you.



However, as your query is related to Azure Multi-Factor Authentication Sever. I would suggest you to post your query in
TechNet forums, where we have experts and support professionals
who are well equipped with the knowledge on Azure multi-factor authentication sever to assist you with the appropriate troubleshooting steps.



We await your response.



Aditya Roy

Microsoft Community – Moderator

 

Multi-factor authentication on Windows 10

Hi Varunn,

Yes there are ways for the multifactor authentication being set. This will require some working on the domain controller. Here is a link of a way Microsoft suggest multifactor authentication:

https://blogs.technet.microsoft.com/cbernier/20...

You can also use the Windows Bitlocker tool to encrypt the disk and since you enter a fixed password it's basically multifactor authentication. One password to decrypt the disk and then the password for the domain.

Let us know if you need anything else. We are here to help you out.

 

AMD FX OC'ers Club

That's what the auto setting will do since you're over the 1333 mark it jumps to the next step which isn't listed or officially supported I assume by that ram.

At this point though I would suggest dropping the multi one step or .5 so that we can get something stable and possibly take the heat issue out of the picture for now.