Can you give me some advice? We have 100 laptops in the company in different parts of the country. We want to add this to InTune, but one at a time. Generally, everything was going well, but the employees don't have a local administrator, and I couldn't get around it, because the procedure for adding to InTune requires administrator rights.
As long as you configure the profiles correctly, and Autopilot a reset of the machine would then pick up the new settings. If you’ve set it up correctly of course 😊
It could be the Entra ID registration campaign for using Microsoft Authenticator that trigger it. It is on by default for all users. Or the tenant in question has been hit by the MFA require enforcement.
Seems a little risky to NOT protect your admin account with MFA? I mean the bad guys have little problem scooping the stored password out of the browser (because everyone does it).
Hey Andy, this video was handy for my interview preparation. Thank you
Glad it was helpful!
Thanks for this one, I picked up a couple of nice tips here.
Thank you sir
Can you give me some advice? We have 100 laptops in the company in different parts of the country. We want to add this to InTune, but one at a time. Generally, everything was going well, but the employees don't have a local administrator, and I couldn't get around it, because the procedure for adding to InTune requires administrator rights.
As long as you configure the profiles correctly, and Autopilot a reset of the machine would then pick up the new settings. If you’ve set it up correctly of course 😊
I cant seem to make the exclusion work on the Authentication methods. I added the group but it is still forcing the MS Authenticator to be setup.
I believe the MFA is being enforced by Microsoft now and we don’t seem to have any option
Please be aware that MS enforces MFA by 15th October for all users !! To sign in to Azure portal and more
It could be the Entra ID registration campaign for using Microsoft Authenticator that trigger it. It is on by default for all users. Or the tenant in question has been hit by the MFA require enforcement.
What can a Global Admin achieve without MFA? I thought Msoft now require MFA for all admin portals
Indeed, they do it is now mandatory
Seems a little risky to NOT protect your admin account with MFA? I mean the bad guys have little problem scooping the stored password out of the browser (because everyone does it).
I run 2 glass break admin accounts with a 90 character password, no MFA. Don't think MFA will have issues but never know.