MFA on Windows 10 login

%3CLINGO-SUB%20id%3D%22lingo-sub-1592630%22%20slang%3D%22en-US%22%3EMFA%20on%20Windows%2010%20login%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1592630%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20there.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWe%20need%20to%20include%20MFA%20on%20login%20screen%20for%20Windows%2010%20PCs%20and%20Laptops%20on%20our%20domain.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Eis%20it%20possible%20using%20only%20Microsoft%20Solutions%20eg%20Microsoft%20Authenticator%20%3F%20Can%20you%20guide%20me%20to%20any%20deployment%20guides%20or%20documentation%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1592630%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAuthentication%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1592743%22%20slang%3D%22en-US%22%3ERE%3A%20MFA%20on%20Windows%2010%20login%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1592743%22%20slang%3D%22en-US%22%3ESeems%20there%20is%20no%20'tick%20box'%20available%20for%20this%20like%20there%20is%20in%20MS365%20-%20the%20issue%20is%20the%20user%20is%20on%20an%20ADDS%20domain%2C%20not%20in%20MS365.%20You%20specifically%20asked%20for%20Microsoft-only%20solutions%2C%20but%20I%20expect%20you'll%20probably%20need%20to%20look%20for%20a%203rd%20party%20solution.%20A%20quick%20Google%20shows%20a%20few%20%22free%22%20ones%2C%20but%20they%20seem%20convoluted%20and%20I%20suspect%20you'll%20get%20what%20you're%20(not)%20paying%20for.%20My%20personal%20favorite%20is%20WatchGuard%20AuthPoint.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1593743%22%20slang%3D%22en-US%22%3ERe%3A%20MFA%20on%20Windows%2010%20login%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1593743%22%20slang%3D%22en-US%22%3ENot%20possible%20with%20the%20Authenticator%20app.%3CBR%20%2F%3EThere%20are%20a%20few%20options%20with%20Windows%20Hello%20for%20business%20though%20-%20%3CA%20href%3D%22https%3A%2F%2Fwww.cloud-boy.be%2Fblog%2Fwindows-hello-for-business-multi-factor-unlock-with-intune%2F%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fwww.cloud-boy.be%2Fblog%2Fwindows-hello-for-business-multi-factor-unlock-with-intune%2F%3C%2FA%3E%3C%2FLINGO-BODY%3E
Occasional Visitor

Hi there. 

 

We need to include MFA on login screen for Windows 10 PCs and Laptops on our domain. 

 

is it possible using only Microsoft Solutions eg Microsoft Authenticator ? Can you guide me to any deployment guides or documentation 

2 Replies
Seems there is no 'tick box' available for this like there is in MS365 - the issue is the user is on an ADDS domain, not in MS365. You specifically asked for Microsoft-only solutions, but I expect you'll probably need to look for a 3rd party solution. A quick Google shows a few "free" ones, but they seem convoluted and I suspect you'll get what you're (not) paying for. My personal favorite is WatchGuard AuthPoint.
Not possible with the Authenticator app.
There are a few options with Windows Hello for business though - https://www.cloud-boy.be/blog/windows-hello-for-business-multi-factor-unlock-with-intune/