You have a Microsoft 365 tenant that has Modern authentication enabled for an services Multi- factor authentication (MFA) is enforced for all users. You are deploying Microsoft Teams Rooms. The…

Question

Options

• AThe Microsoft Authenticates app is not configured for the Teams Rooms account.
• BThe Teams Rooms account is not licensed for Microsoft intune.
• CTeams Rooms must be domain joined first.
• DMFA is unsupported In reams Rooms.

• A
  3% (1)
• B
  7% (2)
• C
  17% (5)
• D
  72% (21)

Explanation

Microsoft Teams Rooms devices use a dedicated service account that signs in unattended and automatically, meaning no human is present to respond to an MFA prompt - making MFA fundamentally incompatible with the Teams Rooms sign-in flow. To resolve this, you must exclude the Teams Rooms resource account from MFA enforcement (e.g., via a Conditional Access policy exclusion or a legacy per-user MFA exception).

Why the distractors are wrong:

• A - The Authenticator app handles interactive MFA for human users; Teams Rooms service accounts don't use it, and configuring it wouldn't help an unattended device.
• B - Intune licensing governs device management/enrollment, not authentication; it has no bearing on whether sign-in succeeds.
• C - Teams Rooms supports cloud-only (Azure AD joined) deployments and does not require domain joining.

Memory tip: Think "unattended = no MFA." Any device or service that signs in without a human present (Teams Rooms, shared mailboxes, service accounts) will break when MFA is enforced - always carve out an exception via Conditional Access for those accounts.

No community discussion yet for this question.