[FIXED] How to prevent sign in page from asking new users for additional security verification

Question

Update: thanks for all the suggestions, I figured out it was the Windows insider that was causing it.when I installed Windows 10 build 1909 on a Hyper-V VM and signed into it during installation using AAD, i was not asked to provide phone number.it was also a new user that I created with no admin rights.&nbsp;&nbsp;I'm trying to build an AAD-based environment, created few users with standard rights (non-administrators). when I go to one of my Windows 10 machines and try to join it to AAD using work/school account, after entering Email and password, I'm presented with this screen asking for phone number and verification. I'm looking for a way to stop it from appearing.there is another option in that drop down menu that is for using authenticator app to receive codes but I want to entirely disable this "additional security verification" for the users I create in my ADD.&nbsp;&nbsp;&nbsp;

cloudhal · Answer

HotCakeX&nbsp;this could be either Security Defaults (See&nbsp;https://aka.ms/securitydefaults&nbsp;for more info) or Azure AD &gt; Conditional Access (unlikely if you have not configured this).Also look in Azure AD &gt; Sign Ins and look at the logins, click on Conditional Access and it will say if any policies were applied.Also FYI that page which shows if MFA enable or no always shows disabled if MFA is enforced through either of the above methods.

mtwilhaar · Answer

lucafabbri365&nbsp;We are also currently working on Windows Hello for Business.These laptops are Azure AD Joined and are managed through Intune.Our customer does not want to use the Microsoft Authenticator app.,an SMS or telephone call is fine.How can we disable the Authenticator App. We already have the authenticator appturned off at. SSPR and at the authentication methods. Nevertheless, we do getthe prompt to use the authenticator app.

thijs lecomte · Answer

Are you enrolling them into Intune?If so, you should disable Windows Hello for Business.Intune - Device Enrollment - Windows - Hello for BUsiness- put it to disabled.

hotcakex · Answer

Thijs Lecomte&nbsp;Hi,I did what you suggested but it's still asking for phone number.&nbsp;&nbsp;the user I created is a normal (non-Administrator) user and password reset self service is set to "none".&nbsp;I'm using the&nbsp;Microsoft 365 Business Trial.&nbsp;the Windows 10 that I am trying to sign in into has already a local administrator (an outlook.com personal account).also I am using Windows 10 insider fast ring build 19018.&nbsp;this is where I am trying to sign in.&nbsp;&nbsp;

thijs lecomte · Answer

So you are trying to log into the new account page?That's where you are getting MFA?

Forum Discussion

[FIXED] How to prevent sign in page from asking new users for additional security verification

10 Replies

Resources