Forum Discussion

PatrickF11's avatar
PatrickF11
MCT
May 19, 2019

Require MFA for Intune device enrollments

Hi,   belonging to the following MS docs i'm wondering why some of my users need to provide MFA while enrolling their device, even if i have not set up the conditional access as descibed in the MS ...
Conditional Access
Intune
mobile device management (mdm)
PatrickF11's avatar
PatrickF11
MCT
May 20, 2019

Hi Oliver Kieselbach 

 

sorry, i meant iOS & Android Enrollment.

(By the way: The mentioned setting is active in my tenant config.)

Oliver Kieselbach's avatar
Oliver Kieselbach
MVP
May 20, 2019

PatrickF11 

 

:-) ah okay. Android and iOS should not be affected from this setting. Did you have several CA policies active in your tenant? Did you try to use the CA "What if" feature to check if you might be affected under certain conditions which then might include the "Microsoft Intune Enrollment" app as mentioned in the article?

  • PatrickF11's avatar
    PatrickF11
    MCT
    May 21, 2019

    Oliver Kieselbach 

    At this moment there are only 2 CAs active:

    One is for administrators and one is for ActiveSync (Blocking of the native ios&android app, to gently "push" the use of the Outlook App. ;-)

     

    So at this moment i don't have any idea. :/

    • hskovgaard's avatar
      hskovgaard
      Copper Contributor
      May 21, 2019
      Do those users have MFA enabled here: https://account.activedirectory.windowsazure.com/usermanagement/multifactorverification.aspx ?
      • PatrickF11's avatar
        PatrickF11
        MCT
        May 21, 2019

        Hi hskovgaard,

         

        i know that some users use MFA, but they don't appear in this list from your link.

        What should account.activedirectory.windowsazure.com effect? When i look into this no user has MFA enabled, even if i know some registered for MFA.

Resources