How to configure MFA for Intune-managed devices to require password and MFA at start-up or restart, and password-only for sleep mode resumption.

Asad Shah 0 Reputation points
2024-08-21T15:32:18.19+00:00

How can I configure Multi-Factor Authentication (MFA) for Intune-managed Windows devices to require both a password and MFA at start-up or restart, but only a password when the device enters sleep mode and then resumes? I am not sure if this is possible with Intune, so any guidance on how to achieve this would be appreciated.

Microsoft Intune
Microsoft Intune
A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.
4,968 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
21,366 questions
{count} votes

1 answer

Sort by: Most helpful
  1. Aleksandr Kolesnikov 486 Reputation points
    2024-08-23T07:04:04.9733333+00:00

    Hi Asad Shah,

    I would suggest you have a look at Windows Hello for Business:

    Windows Hello is an authentication technology that allows users to sign in to their Windows devices using biometric data, or a PIN, instead of a traditional password. It provides enhanced security through phish-resistant two-factor authentication, and built-in brute force protection.

    Or Platform SSO for macOS devices.

    Best regards,

    Aleksandr


    If the response is helpful, please click "Accept Answer" and upvote it.

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.