Microsoft Intune
A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.
4,902 questions
How to service a domain after hours secured by MFA
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(281.6, 98%, 37%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJ%3C/text%3E%3C/svg%3E)
JpSmith
0
Reputation points
We are trying to integrate MFA into our Hybrid Azure Domain. Our main issue is that support works late into the night, and it would not be convenient to call a user asking for their one time code. What is the best way to facilitate MFA giving Admins access to mfa protected machines and apps? We also currently use SSO thru Azure and secure the domain with conditional access. Thanks
{count} votes
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(70.4, 96%, 16%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EFA%3C/text%3E%3C/svg%3E)
Fabio Andrade 1,275 Reputation points Microsoft Employee2024-07-15T23:42:21+00:00 Hi @JpSmith
Thanks for reaching out to Microsoft Q&A
I'm not sure if I understood your scenario, could you please provide more details?
- How do your users login and MFA to the "protected machines", do they use user/password and then have to enter a one-time code from Authenticator app or other like RSA?
- Are those machines Azure VMs or on-premises servers?
Technically, each user should have their own credentials and MFA methods, so it would be great to have more information about how your environment works.
Thanks,
Fabio
-
JpSmith 0 Reputation points
2024-07-16T05:17:55.4666667+00:00 Yes, password and onetime code provided by either sms or authenticator application. Not sure about your second question. MFA is provided by Azure. The workstations are on premise.
-
JpSmith 0 Reputation points
2024-07-16T05:18:24.0566667+00:00 Yes, password and onetime code provided by either sms or authenticator application. Not sure about your second question. MFA is provided by Azure. The workstations are on premise.
-
Fabio Andrade 1,275 Reputation points Microsoft Employee
2024-07-16T23:28:22.9+00:00 Hi @JpSmith
I'm just trying to understand the reason why your help desk needs to call someone to use the code via SMS or the app, the help desk users could have MFA registered for themselves. Could you please share more details about what you need?
Thanks,
Fabio
-
Fabio Andrade 1,275 Reputation points Microsoft Employee
2024-07-24T21:49:01.7166667+00:00 Hi @JpSmith
I just wanted to check if you managed to address your issue and see if you need any help from us. If you are still experiencing it, could you please share more information about it?
Thanks,
Fabio
Sign in to comment
Sign in to answer