Multi-factor Authentication + MAKE FUNCTIONAL
Multi-factor authentication doesn't allow desktop applications (full applications on PC) operate properly at login. Windows 7 professional
Rob Nicholson commented
>if you're talking about dual-factor authentication - it works just fine: this shows you haven't tried asking normal users to use MFA. Turn it on and they have to generate app passwords for Outlook and Skype. Try doing that on a mobile device without a storm of support tickets...
Rob Nicholson commented
My client is quite rightly concerned about security so I suggested we look at MFA. Turned it on for a couple of pilot users (inc. myself) and then turned it off within an hour. It adds an unacceptable burden to normal users especially on mobile devices - specifically application codes. As they are system generated, they are horrible to generate and use on mobile and not much better on desktop. Expecting 50 users (goodness knows what big companies do) to generate an application code and enter it into every application and device they use is not practical. They have trouble remembering their own Office 365 password.
Sadly like so many things in Office 365, it's half-baked. My client will therefore be forced to live in a more insecure environment until the MFA experience is much improved. By this we mean that they authenticate themselves with MFA per device *once* and via a very simple user interface.
Sam Kemble commented
Office security told me to add MFA and now I have wasted 5 hours because incompatible with Power Bi. Why have an Admin Centre if it gives bad advice? Get it right. This costs me thousands of dollars.
if you're talking about dual-factor authentication - it works just fine. Office 2016 uses your DEVICE as the second factor, plus your account+password as the first factor. Ever tried connecting to your O365 with Outlook 2016 from a device that is NOT yours? Same for Logins via Edge btw. Your Device is automatically trusted. Use Chrome - and you'll need the second factor.
Abdul Tohid commented
How can Microsoft in 2017 not support MFA on OUTLOOK 2016 desktop client, works fine via web and mobile app it’s difficult for me to believe, app passwords method isn't secure as you'll end up saving these somewhere as they are non-memorable passwords and need to be saved by users.