Windows Autopilot - exclude requirement for MFA?

Question

Windows Autopilot - exclude requirement for MFA?

Mikkel Lund Knudsen 116

Hey there,

So I got a question here,

We want to utilize Windows Autopilot - but not all of our users do get a company phone, and we can't really require them to use their private phone. (Don't ask!)

So, my question is - we currently use "User-Driven" deployment mode - but is there any way we can allow users to enroll without the need for MFA? (I don't even like the idea - I just need to know my alternatives).

Thanks in advance! :)

2 answers

Your answer

Answer 1

Nick Hogarth 3,521 Volunteer Moderator

Do you currently have Autopilot and it is prompting for MFA? Do you have conditional access policies assigned to the users that require MFA?

Side note: Have you looked at the new Temporary Access Pass? https://learn.microsoft.com/en-us/azure/active-directory/authentication/howto-authentication-temporary-access-pass

Mikkel Lund Knudsen 116 Reputation points

2022-11-03T22:52:16.807+00:00

Hey Nick,

Thanks for replying - let me have a look at TAP :)
Mikkel Lund Knudsen 116 Reputation points

2022-11-07T20:17:49.567+00:00

So, right now we need to do MFA 2 times - as I see it.

First time when we start enrolling just before the device goes into ESP and device preparation / device setup, and then once more intially when the user finalizing the account setup part - correct?

How can we bypass these two steps?

I don't assume that Temporary Access Pass can be used for both steps, or am I mistaking?

Answer 2

Mikkel Lund Knudsen 116

Anyone? :)

Share via

Windows Autopilot - exclude requirement for MFA?

2 answers

Your answer