[FIXED] How to prevent sign in page from asking new users for additional security verification

[HotCakeX]

Update: thanks for all the suggestions, I figured out it was the Windows insider that was causing it.

when I installed Windows 10 build 1909 on a Hyper-V VM and signed into it during installation using AAD, i was not asked to provide phone number.

it was also a new user that I created with no admin rights. 

I'm trying to build an AAD-based environment, created few users with standard rights (non-administrators). when I go to one of my Windows 10 machines and try to join it to AAD using work/school account, after entering Email and password, I'm presented with this screen asking for phone number and verification. I'm looking for a way to stop it from appearing.

there is another option in that drop down menu that is for using authenticator app to receive codes but I want to entirely disable this "additional security verification" for the users I create in my ADD. 

[#2]

Are you enrolling them into Intune?

If so, you should disable Windows Hello for Business.
Intune - Device Enrollment - Windows - Hello for BUsiness- put it to disabled.

[#3]

@Thijs Lecomte 

Hi,

I did what you suggested but it's still asking for phone number.

the user I created is a normal (non-Administrator) user and password reset self service is set to "none".

I'm using the Microsoft 365 Business Trial.

the Windows 10 that I am trying to sign in into has already a local administrator (an outlook.com personal account).

also I am using Windows 10 insider fast ring build 19018.

this is where I am trying to sign in.

[#4]

So you are trying to log into the new account page?
That's where you are getting MFA?

[#5]

@Thijs Lecomte 

I'm trying to log in on the page I showed in my screenshot above, Windows 10 settings.

also MFA is disabled for all my accounts

[#6]

@HotCakeX this could be either Security Defaults (See https://aka.ms/securitydefaults for more info) or Azure AD > Conditional Access (unlikely if you have not configured this).

Also look in Azure AD > Sign Ins and look at the logins, click on Conditional Access and it will say if any policies were applied.

Also FYI that page which shows if MFA enable or no always shows disabled if MFA is enforced through either of the above methods.

[#7]

Hi,
thank you, that FYI is also very helpful

in my AAD sign-ins, I get this
"To see sign-in data, upgrade your organization's subscription to include Azure AD P1 or P2. Your current license status: Azure AD Free"
I activated E5 enterprise plan trial and now I can see the list, in the conditional access column, it says "not applied", for all of them

also in the ADD conditional access, all of them are off.

is it possible that Windows insider program has something to do with this?