Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Save the new Logon policy.

Now create the offline policies that will be needed once you remove the machine from the network.

Section
bordertrue


Column

Click on  on the top right.

Set these Values in the Policy - New Window

OptionValue
Category:

Computer Logon Client

Holder:

Domain

Domain:Enter the virtual domain name
Name:Enter a user-friendly name
Enabled:True



Column
width60%


Panel
borderColor#9EBEE5
bgColor#f0f0f0
borderWidth1px



...

Section
bordertrue


Column

Scroll down the policy and expand Offline Logon

Check Enforce MFA on Local Computer Logon and Download Offline Tokens Automatically


Column
width60%


Panel
borderColor#9EBEE5
bgColor#f0f0f0
borderWidth1px




Save the new Computer Logon Client policy

Create an additional Computer Client Logon Policy which will exempt the Administrator account from MFA logon.

Section
bordertrue


Column

Click on Image Added on the top right.

Set these Values in the Policy - New Window

OptionValue
Category:

Computer Logon Client

Holder:

User

Domain:Enter the virtual domain name
User:Enter the name of the account you wish to exempt (e.g Administrator)
Name:Enter a user-friendly name
Enabled:True



Column
width60%


Panel
borderColor#9EBEE5
bgColor#f0f0f0
borderWidth1px

Image Added




Section
bordertrue


Column

Expand General. Leave all checkboxes blank.


Column
width60%


Panel
borderColor#9EBEE5
bgColor#f0f0f0
borderWidth1px

Image Added




Section
bordertrue


Column

Scroll down the policy and expand Offline Logon

Leave all checkboxes blank.


Column
width60%


Panel
borderColor#9EBEE5
bgColor#f0f0f0
borderWidth1px

Image Added




Save the new Computer Logon Client policy

...

Save the new Windows Offline policy

Create an additional Windows Offline Policy which will exempt the Administrator account from MFA logon.

Section
bordertrue


Column

Click on Image Added on the top right.

Set these Values in the Policy - New Window

OptionValue
Category:

Computer Logon Client

Holder:

User

Domain:Enter the virtual domain name
User:Enter the name of the account you wish to exempt (e.g Administrator)
Name:Enter a user-friendly name
Enabled:True

Leave all the enforce MFA checkboxes blank.


Column
width60%


Panel
borderColor#9EBEE5
bgColor#f0f0f0
borderWidth1px

Image Added