MFA is required when signing in to Win10

%3CLINGO-SUB%20id%3D%22lingo-sub-236825%22%20slang%3D%22en-US%22%3EMFA%20is%20required%20when%20signing%20in%20to%20Win10%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-236825%22%20slang%3D%22en-US%22%3E%3CP%3EHave%20already%20posted%20this%20in%20Windows%20Insider%20forum%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2FWindows-Insider-Program%2FWindows-Insider-for-Business-requires-MFA%2Fm-p%2F236621%23M1929%22%20target%3D%22_blank%22%3Ehttps%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2FWindows-Insider-Program%2FWindows-Insider-for-Business-requires-MFA%2Fm-p%2F236621%23M1929%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EBut%20after%20reinstalling%20this%20PC%20and%20without%20connecting%20it%20to%20Insider%20program%20still%20experience%20the%20same.%20When%20installing%20it%20i%20have%20provided%20my%20work%20Office%20365%20account.%20When%20signing%20in%20it%20requires%20to%20create%20a%20PIN.%20We%20have%20Office%20365%20E3.%20We%20don't%20have%20Intune%20licenses.%20I%20can't%20find%20anything%20related%20in%20Azure%20AD%20admin%20center%20to%20disable%20this%20requirement.%20I%20also%20don't%20see%20this%20PC%20in%20devices%20list%20of%20our%20org.%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-236825%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EIntune%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-242505%22%20slang%3D%22en-US%22%3ERe%3A%20MFA%20is%20required%20when%20signing%20in%20to%20Win10%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-242505%22%20slang%3D%22en-US%22%3E%3CP%3EThis%20setting%20is%20set%20to%20No.%20There%20are%20a%20bunch%20of%20Azure%20AD%20registered%20devices%20(happens%20when%20Office%20365%20client%20is%20activated%20on%20Windows%2010%20device)%2C%20but%20this%20PC%20is%20not%20on%20the%20list.%20No%20Azure%20AD%20joined%20devices%20on%20the%20list.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-242451%22%20slang%3D%22en-US%22%3ERe%3A%20MFA%20is%20required%20when%20signing%20in%20to%20Win10%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-242451%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20Oleg%2C%3CBR%20%2F%3EWhen%20you%20sign%20into%20a%20Windows%2010%20PC%20using%20your%20Work%20Account%2C%20it%20is%20actually%20trying%20to%20add%20the%20computer%20to%20Azure%20AD.%3CBR%20%2F%3ELogon%20to%20%3CA%20href%3D%22http%3A%2F%2Fportal.azure.com%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttp%3A%2F%2Fportal.azure.com%3C%2FA%3E%20then%20click%20on%20Azure%20Active%20Directory%20%26gt%3B%26nbsp%3BDevices%20%26gt%3B%20Device%26nbsp%3BSettings%20%26gt%3B%20%22Require%20Multi-Factor%20Auth%20to%20join%20devices%22%26nbsp%3B%3C%2FP%3E%3CP%3EIs%20this%20set%20to%20Yes%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
Super Contributor

Have already posted this in Windows Insider forum https://techcommunity.microsoft.com/t5/Windows-Insider-Program/Windows-Insider-for-Business-requires...

 

But after reinstalling this PC and without connecting it to Insider program still experience the same. When installing it i have provided my work Office 365 account. When signing in it requires to create a PIN. We have Office 365 E3. We don't have Intune licenses. I can't find anything related in Azure AD admin center to disable this requirement. I also don't see this PC in devices list of our org. 

2 Replies
Highlighted

Hi Oleg,
When you sign into a Windows 10 PC using your Work Account, it is actually trying to add the computer to Azure AD.
Logon to http://portal.azure.com then click on Azure Active Directory > Devices > Device Settings > "Require Multi-Factor Auth to join devices" 

Is this set to Yes?

Highlighted

This setting is set to No. There are a bunch of Azure AD registered devices (happens when Office 365 client is activated on Windows 10 device), but this PC is not on the list. No Azure AD joined devices on the list.