Approve, disable and retire computers, and see their history

Under «Manage» › «Computers» you see the enrolled computers, their state, compliance and trust, and decide what each may do.

What does the list show?

States: «Active», «Waiting for approval», «Disabled», «Retired».

Which actions are there?

Each action shows a confirmation, for example that the computer was approved.

Sign-in history

In the computer's «Details», the «Sign-ins» section shows «When», «Account», «How» («phone» or «authenticator app») and «Outcome». Refusal reasons include «no answer», «wrong codes», «declined on the phone», «reported as not me», «wrong number typed», «refused by policy», «unknown Windows account» and «no phone or app enrolled». It also shows whether Windows completed the session («signed in» or «Windows refused the password»).

This is where support sees why someone's phone received nothing.

Uninstalling for good

msiexec /x AuthGuardDesktop-x64.msi /qn removes the provider before the files and Windows returns to its own options. Then retire the computer in the console.

Errors

«This computer cannot do that in its current state.»: for example approving a retired computer. «The computer changed meanwhile. Refresh and try again.»: another administrator acted first.