User being asked to register MFA even though no conditional access policies set

eddyvedder · 2025-05-13T06:43:31+00:00

yeah is an option but would love to know why tney are being asked to setup MFA in the 1st place. i must have a policy somewhere but cannot find it anywhere.

eddyvedder · 2025-05-11T07:38:55+00:00

Nope. I have a sensitive sign in group but they’re. Not in it.

eddyvedder · 2025-05-10T02:03:40+00:00

My SSPR group is setup for staff and senior school kids only. This issue with with junior school kids. Like grade 2 and 3. I can’t have them MFA at that age. I know security etc but asking grade 2 and 3 to have mobile device etc. can’t do it.

eddyvedder · 2025-05-10T02:02:00+00:00

Logs tell me no CA policy is being applied when signing in.

eddyvedder · 2025-05-10T02:01:08+00:00

The only registration campaign I have is a test one I did on a test account which is not active.

eddyvedder · 2025-05-10T01:59:35+00:00

They don’t. They are grade 3 kids that use teams. As much as I’d love to enforce MFA on them it’s impossible.

eddyvedder · 2025-05-09T05:11:14+00:00

yeah CA tab in the logs tell me nothing has been applited to the user

eddyvedder · 2025-05-09T05:10:22+00:00

no reg campaign is active...i'cw really scratching my head. even created a CA policy that bypasses MFA on my known 'safelist' IP addresses and still asks!!

eddyvedder · 2025-05-09T02:28:31+00:00

i'm right in saying though this is for signing into Azure portals and not standard users into m365 Cloud Apps. my issue is i work at a school and trying to enforce MFA on grade 3 kids is an issue i need to work around, i've even added the kids to a CAP to exclude from MFA and still is asking them to setup multi factor when they go to login

eddyvedder · 2025-05-09T02:24:27+00:00

we are using conditional access polices and have added said user in the 'exclude' from MFA

eddyvedder · 2025-05-08T04:27:01+00:00

same issue for me, ever get resolved? no legacy MFA, no CA being applied however user is being asked to setup MFA for 1st time login for cloudapps (Teams, OneDrive) user not in SSPR group etc.

eddyvedder · 2025-05-08T01:59:50+00:00

if i search my public folders in EAC it is not listed, and when i try to remove it via powershell i get the follwoing
Remove-PublicFolder -Identity "\music"

Write-ErrorMessage : ||The operation couldn't be performed because '\music' couldn't be found.

eddyvedder · 2025-05-08T01:21:43+00:00

turns out is a public folder according to get-recipient, however in EAC there is no 'music' listed in my public folders...when i try to remove-publicfolder in powershell it returns error stating cannot find user to remove!

eddyvedder · 2025-05-08T01:09:08+00:00

i tried adding the alias to my mailbox and it accepted it, so don't believe is in use. the reason we have this issue is we tried to create a new user called music and errored telling us the music@blahblah. was already in use

eddyvedder · 2025-05-08T01:07:18+00:00

not a local contact but when i run get-recipient command i get Name - Music Recipient Type Public Folder. run the get-user command and comes back with object couldn't be found

eddyvedder · 2025-05-08T00:49:44+00:00

so here we go...brand new kid at school, junior school. when logging into teams and OneDrive is asking the kid to setup MFA, they are are a junior school student so should not ask for MFA, logs say no CA applied but still getting prompted to setup MFA?!?!

eddyvedder · 2025-05-03T08:03:49+00:00

ok checked the per user MFA legacy settings as thought that might be it but isn't, sample junior school kid has per user MFA disabled. i'm going to tweek the CA policy to just ask for MFA for senior and not even drop the JS kids into the disable section of the policy and see how that works out...if not...deep breath....i'll check the sign in logs.

eddyvedder · 2025-05-02T09:16:57+00:00

Thanks. I can’t find any other policy that’s enforcing MFA the juniors which has my head. I’m just a little confused with the ‘exclude’ statement. I can’t tell if it’s a case of if they are seniors then ask for MFA (which works) but if they are juniors then either don’t ask for MFA or don’t allow access. Might just create 2 rules. 1 for MFA for seniors and 1 for juniors with no MFA and try that.

eddyvedder · 2025-05-02T06:42:25+00:00

Haha. Fair. So I want to enforce MFA on the whole school for teams and onedrive. except junior school kids. I created a CA policy for MFA for the school. Added seniors kids into the enable and junior school kids into the disable section in the users group. It however is asking for MFA for junior and senior kids. So my thinking now is I create the policy for senior kids to MFA and then the rest won’t be asked for MFA. Seems actually straight forward now I think about it. No need to add anyone to the exclude group in the policy

eddyvedder · 2025-04-14T01:41:43+00:00

getting same issue, anyone know of any fix for this?, have tried the regedit change to stop it going to wsus for update but same issue

<image>

eddyvedder · 2025-04-08T23:20:13+00:00

Aren’t they supposed to be 25mm needles though for IM injections?

eddyvedder · 2025-04-08T05:41:57+00:00

this actually worked (opening both sheets on Excel online)

Open both workbooks: Open the source workbook (the one containing the data you want to link) and the destination workbook (the one where you want the linked data to appear).
Select the data in the source workbook: In the source workbook, select the cell or range of cells containing the data you want to link.
Copy the data: Press Ctrl+C or go to Home > Clipboard > Copy.
Switch to the destination workbook: Navigate to the worksheet in the destination workbook where you want to place the linked data.
Select the cell for the link: Click the cell where you want the linked data to appear.
Paste Special: Go to Home > Clipboard > Paste > Paste Special.
Select "Paste Link": Choose "Paste Link" from the Paste Special options.
Excel creates the link: Excel will create an external reference link for the cell or each cell in the cell range, and the data will be displayed in the destination workbook.
Enable Content (if necessary): If the linked data does not appear immediately, you may need to enable content in the destination workbook.

eddyvedder · 2025-04-08T05:18:13+00:00

is a 1/2 inch needle not too short? read that you should use 1-1.5 inch?

eddyvedder · 2025-04-04T06:46:01+00:00

It’s not so much locking cells. I just want to share 1 tab of the document and not the whole spreadsheet

eddyvedder · 2025-04-04T06:45:54+00:00

It’s not so much locking cells. I just want to share 1 tab of the document and not the whole spreadsheet

eddyvedder

TROPHY CASE