Hi
I know many will object but users (including IT admins) will work in ways that are easy for them regardless of IT requests or security concerns.
Q. When a user logins to office.com and selects "trust this computer/remember me", they can then log in to office.com from that computer without any request for credentials. If also makes 2FA a bit useless. The computer could be a friends, college computer, library PC, etc. People do and will tick that setting and will simply shut down the browser without logging off. Anyone else, then goes to office .com with the same browser and they have full access to a user account. It logs you straight in.
How can you auto log off users after a period of inactivity from office.com as this poses a serious security risk. We have not found a solution yet.
