I was wondering if it is already possible to activate MFA from Azure AD so that Windows users can securely log in to their computer via MFA?

In Windows 10 it is not available to do "Azure MFA" at the time of login. But the "Windows Hello for Business" is considered strong auth. If you want to do MFA at the time of login, Windows Hello For Business (bio metric/PIN etc) is the answer. There is an open feedback item for this: https://feedback.azure.com/forums/169401-azure-active-directory/suggestions/19319638-add-mfa-support-to-secure-the-windows-10-logon

I'm not the only one who is surprised I see ...thanks

Windows 10 MFA at Login on Azure AD

Accepted answer

Marilee Turscak-MSFT 36,411 Reputation points Microsoft Employee

2020-07-07T23:58:32.373+00:00

In Windows 10 it is not available to do "Azure MFA" at the time of login. But the "Windows Hello for Business" is considered strong auth. If you want to do MFA at the time of login, Windows Hello For Business (bio metric/PIN etc) is the answer.

There is an open feedback item for this: https://feedback.azure.com/forums/169401-azure-active-directory/suggestions/19319638-add-mfa-support-to-secure-the-windows-10-logon
Please sign in to rate this answer.
Matt Yates 26 Reputation points

2020-10-05T15:58:29.077+00:00

Windows Hello for business (pin and biometrics) does not meet the Multifactor Authentication requirements (specifically around CMMC). While it is strong, it is not true MFA.

Mohanraj Adhiarul 6 Reputation points

2020-12-16T16:07:28.963+00:00

anything in pipeline for windows server

VNJoe 46 Reputation points

2022-04-07T15:57:45.91+00:00

Page not found. So much for Secure by Default when it comes to Windows? Where's the suggestion you sent the link to above and why did it disappear?
Sign in to comment

Share via

Windows 10 MFA at Login on Azure AD

1 additional answer