Disable SMS verification for Hello Pin Setup?

Question

Hi there,

just now I'm remotely working on a few desktops (via Anydesk, in this case).
The computers are joined to AzureAD (O365 tenant), the user accounts are O365 users.

The main user is usually logging in with a FIDO2 key, which is working just fine.

Now, when I try to login as that user, i have to use the O365 password, because I'm not onsite and I don't have that user's FIDO key.
Each time I try, Windows is asking me to setup a Windows 10 Hello PIN, even though we already did that when setting up the user.
And on top of that, it sends a verification SMS to the user.
Only after that SMS was sent I can skip setting up the PIN and I'm logged in and can work.

This is annoying (for me and the user, who is getting strange SMS messages) and I would like to get rid of the SMS verification.

Is it possible to disable the SMS verification?
Or to disable the enforcement of Windows Hello (but still allow it, if the user wants).

Thanks a lot,

Christian
https://tethis-it.at

Answer 1

Hello Aradhya,

first of all, thanks for the answer. But maybe I wasn't clear.

I am that "organization". Or at least I'm the administrator. So I can decide which verification methods are acceptable.

The point is that I want to disable the "Additional Security verification".
I guess that means to disable the enforcement of Windows Hello for the tenant, but I'm not sure about that.

Any ideas how to do that?

Thanks,

Christian