We rolled out mandatory 2 factor authentication for just about everything. The option to remember this device for 60 days was also enabled but on my linked clones with UEM, I am having trouble capturing that setting. I added the entire folder <AppData>\Microsoft\Credentials as well as HKCU\Software\Microsoft\Office\16.0\Common\Identity but it does not seem to remember the 60 day setting. I am assuming this is because it is actually a different MACHINE instead of remembering for the USER. I understand that there is also a way to set microsoft MFA to not ask for a specific subnet (Not a discussion for this forum, I understand) but is this the only way? Users are extremely frustrated as expected.
Thanks for any info that can be shared.