Windows 10: Using Microsoft Authenticator for Windows 10 Login

We are currently in a hybrid environment with all endpoints managed through Endpoint Manager. All PC's are hybrid Azure AD joined and all user accounts are synced in Azure Active Directory as well. We have turned on the security feature to use Microsoft Authenticator app for our Microsoft Accounts, but we want to take it a step further and use it on our Windows 10 devices. Is this an option? Or do we have to use a third party option to complete this?What we currently have enabled right now is Windows Hello for Business and testing this feature. We also created a configuration profile to deploy

:)

 

Windows Microsoft account authentication

I have a valid Microsoft account and a Windows 10 PC with Hello/PIN account login enabled. I also have the Microsoft Authenticator app installed on an iPhone and configured for the Microsoft account. Additionally, I have two step authentication configured
for the Microsoft account. With all of that said, I have become very exasperated while trying to unravel the various authentication paths (and their security implications) through this multi level login security scheme. I find the associated account security
documentation to be woefully inadequate. Thus, I would like to pose the following list of questions for starters.

1. Does Windows Hello/PIN amount to a two step verification login procedure for my Microsoft account?

2. Does approving a Microsoft Authenticator login attempt (without two step verification explicitly set up)

amount to a two step verification login procedure for my Microsoft account?

3. Does approving a Microsoft Authenticator login attempt (with two step verification explicitly set up)

amount to a two step verification login procedure for my Microsoft account?

4. If answers to both 2 and 3 are yes, then what does explicit set up of two step authentication do?

5. Does a coherent, comprehensive document explaining Microsoft account security configuration exist somewhere?

6. If the answer to 5 is yes, wherer is it?

Thanks in advance.

 

Microsoft Account authentication

After more research, I have found my answer. It looks like the issue was that Microsoft released a new Microsoft Authenticator app with the features first introduced in Microsoft Authenticator Beta. The new app received a prompt to approve access to my Microsoft
Account when signing on from a new PC, though I find it strange that the beta app wasn't directly upgraded to the new version of the app.

Microsoft now has three 2 step authentication apps available in the store for Windows 10 Mobile:

• Authenticator - original app from Windows Phone 8
• Microsoft Authenticator Beta - originally released to Windows 10 users when Windows 10 Mobile was only available on the Windows Insider program.
• Microsoft Authenticator - the official Windows 10 app no longer in beta

 

Microsoft Selects Dolby Audio for Windows 10

it would've been great if microsoft added HEVC decoders, LAV filters along with other codecs with Windows 10, and developing WMP to be better than VLC, KMPlayer and such sorts of media players.

Nevertheless, this is good step for microsoft, by far.