Why is user being asked to for 2FA every time they log in/unlock?

Question

Why is user being asked to for 2FA every time they log in/unlock?

Jennifer Storkamp 0

I have a user that is on a domain joined workstation, azure ad profile. And every time they sign-in or unlock their profile they are given a prompt for 2FA (DUO push if it matters). No one else has this issue, and it's been this way since they got their new laptop (almost 3 months ago).

I've removed their O365 account, reviewed event logs, checked Conditional Access policy, and scrubbed Cred. Manager. DUO logs point to Microsoft RDP continually asking for the 2FA, Entra says it's a mix of 'My Signins and Microsoft Account Controls V2'. This doesn't happen with any of the apps and no other users are experiencing this.

I've tried a lot but nothing short of putting the user in Bypass will let them skip having to do 2FA at every login. Any thoughts?

Akshay-MSFT 17,961 Reputation points Microsoft Employee Moderator

2023-09-25T11:20:02.33+00:00

@Jennifer Storkamp

Thank you for postings your query on Microsoft Q&A, from above description I could understand one of your end user is getting 2FA prompt, however I am not sure I understand what actions are being followed to get the prompt.

I would request you to confirm step by step what actions is done by end user to get the 2FA prompt.

Thanks,

Akshay Kaushik

Your answer

Akshay-MSFT 17,961 Reputation points Microsoft Employee Moderator

2023-09-25T11:20:02.33+00:00

@Jennifer Storkamp

Thank you for postings your query on Microsoft Q&A, from above description I could understand one of your end user is getting 2FA prompt, however I am not sure I understand what actions are being followed to get the prompt.

I would request you to confirm step by step what actions is done by end user to get the 2FA prompt.

Thanks,

Akshay Kaushik

Share via

Why is user being asked to for 2FA every time they log in/unlock?

Your answer