Hello!

We recently moved to Intune/Entra ID and Windows 11.  We implemented SSPR and a majority of our users receive the following message when they attempt to change their passwords via Ctrl+Alt+Del->Change a password:

The only way they can reset their password is to go to my.microsoft.com, log in, MS Authenticate, then select the Change password tile.

Some users can perform the Ctrl+Alt+Del->Change a password workflow and go directly to the password change screen (after MS Authenticator), but most others get the "Let's try something else" message.  We've looked at everything - CA policies, groups, sign-in logs, and we've yet to find out why some folks are fine yet most are not. 

Interestingly, if we have someone try the password change from a device known to work correctly, they will get to the change a password screen without the "Let's try something else" pop up, but if they go back to THEIR workstation, they get the "Let's try something else".

We've spent a considerable amount of time trying to figure this one out - can anyone lend some guidance in troubleshooting and resolving this issue?

Thanks!