Forum Discussion

PatrickF11's avatar
PatrickF11
MCT
May 19, 2019

Require MFA for Intune device enrollments

Hi,   belonging to the following MS docs i'm wondering why some of my users need to provide MFA while enrolling their device, even if i have not set up the conditional access as descibed in the MS ...
Conditional Access
Intune
mobile device management (mdm)
Oliver Kieselbach's avatar
Oliver Kieselbach
MVP
May 20, 2019

Hi PatrickF11,

 

some of them could mean only Windows 10? Then it might be the case that you are enforcing MFA on AADJ like this:

 

 

best,

Oliver

  • PatrickF11's avatar
    PatrickF11
    MCT
    May 20, 2019

    Hi Oliver Kieselbach 

     

    sorry, i meant iOS & Android Enrollment.

    (By the way: The mentioned setting is active in my tenant config.)

    • Oliver Kieselbach's avatar
      Oliver Kieselbach
      MVP
      May 20, 2019

      PatrickF11 

       

      :-) ah okay. Android and iOS should not be affected from this setting. Did you have several CA policies active in your tenant? Did you try to use the CA "What if" feature to check if you might be affected under certain conditions which then might include the "Microsoft Intune Enrollment" app as mentioned in the article?

      • PatrickF11's avatar
        PatrickF11
        MCT
        May 21, 2019

        Oliver Kieselbach 

        At this moment there are only 2 CAs active:

        One is for administrators and one is for ActiveSync (Blocking of the native ios&android app, to gently "push" the use of the Outlook App. ;-)

         

        So at this moment i don't have any idea. :/

Resources