Windows 11 Sign-in experience

[Bugzi]

Hello,

 

I wanted to ask how other organisations handle their sign-ins for staff / students on Windows 11 devices please.

 

We are currently rolling out Windows 11 and are having a bit of a nightmare when it comes to sorting out MFA and Windows 11 sign-in experiences.

 

For staff devices we are looking at Windows Hello for Business but for student devices we are looking at WebSign-in from Microsoft.

But so far, all testing have been rather problematic and disappointing.

 

If you are not using either of these methods, how do you handle the multiple authentications for things like Company Portal and Office apps and OneDrive please?

 

Many thanks

[NicholasEsping]

9 hours ago, Bugzi said:

Hello,

 

I wanted to ask how other organisations handle their sign-ins for staff / students on Windows 11 devices please.

 

We are currently rolling out Windows 11 and are having a bit of a nightmare when it comes to sorting out MFA and Windows 11 sign-in experiences.

 

For staff devices we are looking at Windows Hello for Business but for student devices we are looking at WebSign-in from Microsoft.

But so far, all testing have been rather problematic and disappointing.

 

If you are not using either of these methods, how do you handle the multiple authentications for things like Company Portal and Office apps and OneDrive please?

 

Many thanks

We do not use either of these methods for log on. What we do is set up all computers as shared use in Intune. This allows all users to access the company portal and install applications that are assigned to them on any device they log into. For OneDrive we set the sync with Intune policies for on-demand files, so it does not fully sync the user's library. 

[Bugzi]

Thank you for responding.

Do your users not have to MFA when they try and access Company Portal and apps like OneDrive, Office?

 

We have our devices setup as shared devices too, but when they log into the device with username/password, then when it comes to loading Company Portal, and also doing a manual sync, they get asked to MFA.

[Bugzi]

Hello,

 

Does anyone else might have any ideas please?

 

If anything I have mentioned is confusing, please let me know.

 

Thank you

[NicholasEsping]

On 31/07/2025 at 15:11, Bugzi said:

Thank you for responding.

Do your users not have to MFA when they try and access Company Portal and apps like OneDrive, Office?

 

We have our devices setup as shared devices too, but when they log into the device with username/password, then when it comes to loading Company Portal, and also doing a manual sync, they get asked to MFA.

We do not require MFA to access Company Portal or apps like OneDrive and office. We do require MFA if they are using a device that is not owned by the school though. I would recommend looking into your Windows hello for business policy. Whenever I have enabled that it has tried to force MFA to be set up for all users in our tenant.

[Bugzi]

20 hours ago, NicholasEsping said:

We do not require MFA to access Company Portal or apps like OneDrive and office. We do require MFA if they are using a device that is not owned by the school though. I would recommend looking into your Windows hello for business policy. Whenever I have enabled that it has tried to force MFA to be set up for all users in our tenant.

May I ask please how you have achieved this please?