Disable Multi-Factor Authentication for Screen Unlock

Use this policy to disable multi-factor authentication for the Windows lock screen. When multi-factor authentication is required to log on to a Windows machine, by default, users must also use multi-factor authentication to unlock the Windows lock screen. If this policy is set to Enabled, users that require multi-factor authentication to log on will not have to use multi-factor authentication to unlock the Windows lock screen.

If this policy is set to Disabled or Not configured, the default is to require users to use multi-factor authentication to unlock the Windows lock screen.