Forum Discussion

kirillputryk's avatar
kirillputryk
Copper Contributor
Mar 26, 2021

Is it possible to Uncheck by default the "Don't ask again for X days"

Helo,

We are setting up MFA with Microsoft 365 Standard licences, so we do not have lots of options. Still, is it possible to uncheck option to remember device by default? So user has to check it if needed?

Thank you

 

  • ibnmbodji's avatar
    ibnmbodji
    Steel Contributor
    Hi if you uncheck the option in the main configuration
    You will get this : Note: disabling this feature means that all users will be required to sign in using Multi-Factor Authentication, even if signing in from a previously-remembered device.

    You should you conditionnal access tp have more options .
    • kirillputryk's avatar
      kirillputryk
      Copper Contributor
      Hi, you are talking about service configuration - I do want let users to remember device fo 90 days, but I do not want this option to be checked as default, when they are logging in...
      • ibnmbodji's avatar
        ibnmbodji
        Steel Contributor
        It's not possible simply because they need to define for the first time what is their are trusted device . And checking the box mark the device as trusted .
        See the part of the documentation below

        Mark a device as trusted
        After you enable the remember Multi-Factor Authentication feature, users can mark a device as trusted when they sign in by selecting the option for Don't ask again.

        and the reference : https://docs.microsoft.com/EN-US/azure/active-directory/authentication/howto-mfa-mfasettings

Resources