Sometimes you may come across special cases where either your customer or your own organisation might need to implement a solution which increases your security footprint. This post is no different and inspired from the MS-100 exam which I have recently taken and passed.
During the lab question I was asked how you would implement MFA for end user who want to enroll Windows 10 devices. So lets get to it…
Launch http://endpoint.microsoft.com and select Device + Conditional Access
Select New Policy
Provide your policy a “Name”
Select the user(s) or group(s) you want to apply the policy to
Click Cloud apps and actions – Click Select Apps and search then select Microsoft Intune Enrollment.
Under Grant – Select Require multi-factor authentication
Select on to enable the policy
Heres the process I had to go through to join a Windows 10 device to my tenant with MFA.
In the below screenshot is a configuration setting I have in my tenant for defining if devices are Corporate or Personally owned
All my corporate apps are now available for install.
Regards
The Author – Blogabout.Cloud
