Setting Up Microsoft Authenticator & 2FA on a Pre-Entra Joined Windows Device

Setting Up Microsoft Authenticator & 2FA on a Pre-Entra Joined Windows Device

Help Sheet: Setting Up Microsoft Authenticator & 2FA on a Pre-Entra Joined Windows Device

This help sheet is designed for users logging into their new work device for the first time, where the system has already been joined to the Windows Entra domain by your IT team.

You will be guided through:

1. Downloading the official Microsoft Authenticator app
2. Setting up Two-Factor Authentication (2FA)
3. Logging into your Windows Entra joined device for the first time
4. Creating your Windows Hello desktop PIN

✅ Step 1: Download the Microsoft Authenticator App⚠️ Important Warning: Avoid Fake or Paid Apps

✅ The official Microsoft Authenticator app is completely free — there is no charge or subscription required.

There are fraudulent or misleading apps that may try to imitate the official one and charge you fees. To stay safe:

✅ How to Identify the Official Microsoft App:

• Name: Microsoft Authenticator
• Developer: Microsoft Corporation
• Logo: Blue background with a white lock
• Price: Free (no in-app purchases or subscriptions)

📱 Download Instructions:

1. Open the Google Play Store (Android) or Apple App Store (iOS)
2. Search for Microsoft Authenticator
3. Tap Install (Android) or Get (iOS)
4. Open the app after installation

🔐 Step 2: Set Up Two-Factor Authentication (2FA)

Before logging into your new device, make sure the Microsoft Authenticator app is set up:

1. Open the Microsoft Authenticator app
2. Tap Add account
3. Choose Work or school account
4. Use the QR code or sign-in method provided during login to your PC
5. Allow camera access if prompted to scan a QR code

💻 Step 3: First-Time Login on Your Pre-Entra Joined Device

Your device has already been configured and joined to your organization's Windows Entra domain. Follow these steps to log in for the first time:

1. Turn on your device and wait for the login screen
2. Enter your work email address (e.g., name@company.com)
3. Enter your password
4. You will be prompted to complete 2FA using the Microsoft Authenticator app

• Approve the sign-in notification on your phone

🔒 Step 4: Set Up Your Windows Hello PIN

Once authenticated, you’ll be asked to create a Windows Hello PIN:

1. When prompted, select Set up PIN
2. Enter and confirm a secure PIN:

• Must be at least 6 characters
• May include letters and symbols, depending on your company policy

1. This PIN will be used for future logins on this device

✅ You’re Now Ready to Use Your New Device

You’ve now successfully:

• Installed and configured the official Microsoft Authenticator app
• Completed 2FA on your first login
• Set up your Windows Hello PIN for quick and secure access