Disable multi-factor authentication for screen unlock

Use this group policy to disable multi-factor authentication for the Windows lock screen.

When MFA is required for logon:
If this policy is set to Enabled, users will not be required to do MFA to unlock screen.
If this policy is set to Disabled or Not Configured, users will be required to do MFA to unlock screen.

Supported on:

Registry HiveHKEY_LOCAL_MACHINE
Registry PathSoftware\Policies\Centrify\DirectAuthorize\Agent
Value NameIgnoreScreenUnlockMfa
Value TypeREG_DWORD
Enabled Value1
Disabled Value0

centrify_windows_settings.admx

Administrative Templates (Computers)

Administrative Templates (Users)