Share via

Hi, I need to make a policy in which I want the users that are in my office network should not getting any multifactor authentication.

Anonymous
2024-06-11T18:05:05+00:00

If anyone help me regarding that will be fine. Thanks

Windows Server Remote and virtual desktops

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question. To protect privacy, user profiles for migrated questions are anonymized.

0 comments

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Anonymous
    2024-06-11T20:08:58+00:00

    Are you using Azure? If so here is the guide I made to do this.

    Sign in to the Azure Portal: Head over to portal.azure.com and log in with your admin account.

    1. Navigate to Azure Active Directory: On the left-hand side, click on "Azure Active Directory."
    2. Set Up Conditional Access:
      • Under "Security," select "Conditional Access."
      • Click "New policy" to start creating a new one.
    3. Name Your Policy: Give your policy a straightforward name like "Office Network - No MFA."
    4. Assign Users and Groups:
      • Under "Assignments," go to "Users and groups."
      • Choose the users or groups that should be exempt from MFA. You can pick all users or specific groups.
    5. Configure Cloud Apps:
      • Under "Assignments," select "Cloud apps or actions."
      • Choose which applications this policy should cover. This could be all cloud apps or just specific ones.
    6. Set Conditions:
      • Under "Conditions," select "Locations."
      • Switch "Configure" to "Yes."
      • In "Include," select "Any location."
      • In "Exclude," choose "Selected locations."
      • Pick the locations representing your office network. If you haven’t set these up yet, you can add your office IP address ranges here.
    7. Define Access Controls:
      • Under "Access controls," click "Grant."
      • Set it to "Require multi-factor authentication" and then switch MFA to "On."
    8. Enable Your Policy: Turn the policy "On" and save it.
    0 comments
  2. Anonymous
    2024-06-30T04:21:04+00:00

    Hello,

    May I know which Microsoft product MFA you are referring to, Microsoft 365 or Microsoft Entra?

    Here are the steps to turn off Microsoft 365 per user MFA:

    Image

    References:

    Set up multifactor authentication for users - Microsoft 365 admin | Microsoft Learn

    Deployment considerations for Microsoft Entra multifactor authentication - Microsoft Entra ID | Microsoft Learn

    I hope this helps. Please let me know if you require further assistance or have any questions.

    Best regards

    0 comments