MFA on AAD Joined Devices

[Nikonline]

Hi All, i have enabled the Preview feature to AAD Join and Intune Enrol the Virtual desktops, however i had to disable MFA and CAPs that enforce MFA so to login using the AAD user accounts. This seems to be a big showstopper unless there is a way to enforce MFA?

Note: The MFA works well for Azure ADDS joined Virtual desktops. 

#AzureVirtualDesktop #MFA

[#2]

@Nikonline I replied on the other thread and will update the public documentation soon but the sort version is that to enforce MFA, you need to set the CA policy on the Windows Virtual Desktop app but disable it from the Azure Windows VM Sign-In app. This will enforce MFA at the service level instead of the VM level.