Forum Discussion
Azure mandates new users to use authentication app when 2FA is disabled.
Hello. I've just started doing IT support for a small business. When adding a new user to a PC, Windows demands they create 2FA using the Microsoft authenticator phone app despite me having disab...
The user account you are adding is a Microsoft account, not a local account. Microsoft accounts require 2FA by default, and you cannot disable it from the PC settings. You can either create a local account instead, or disable 2FA from the user’s Microsoft account settings1.
The user account you are adding is part of an Azure Active Directory (AAD) tenant, and the tenant has enforced 2FA for all users. You can check this by going to the Azure portal and looking at the Security settings for the tenant2. You can either disable 2FA for the user from the AAD portal, or contact the tenant administrator to change the policy.
The user account you are adding has previously enabled 2FA using the Microsoft Authenticator app, and the app is still registered as a verification method. You can remove the app from the user’s security info page1, or delete the app from the user’s old phone before installing it on the new phone3.
The user account you are adding is part of an Azure Active Directory (AAD) tenant, and the tenant has enforced 2FA for all users. You can check this by going to the Azure portal and looking at the Security settings for the tenant2. You can either disable 2FA for the user from the AAD portal, or contact the tenant administrator to change the policy.
The user account you are adding has previously enabled 2FA using the Microsoft Authenticator app, and the app is still registered as a verification method. You can remove the app from the user’s security info page1, or delete the app from the user’s old phone before installing it on the new phone3.