Unlock Windows, remote desktop and administrator prompts

Besides sign-in, your organization can ask for the second factor when you unlock your computer, in a remote desktop connection and when a program asks for administrator rights.

Unlock the computer

1. Type your Windows password.
2. The panel shows «Unlock PC-001» (the computer's name) and «Type this number on Ana's Pixel:».
3. On your phone, the request appears as «Unlock Windows». Type the number and approve.

Your organization may set a grace period: for some minutes after an approved sign-in, unlocking the same session asks for the password only.

Remote desktop

• The panel shows «Remote connection to PC-001».
• On your phone, the request appears as «Sign in to Windows remotely».
• Organizations usually always require the second factor for remote sessions.
• Without a connection to the service, remote sign-in is not possible: «AuthGuard is unavailable: remote sign-in is not possible right now.» Offline codes and the break-glass account never work for remote sessions.

Administrator prompts

When your organization turns this scenario on and a program asks for administrator rights, your phone receives «Allow an administrator on Windows». Approve only if you started the action. By default, UAC and run-as prompts stay with Windows alone.

When am I asked for my phone?

Your organization's computer policy decides: sign-in, unlock, remote desktop and, optionally, administrator prompts. Some service accounts sign in with a password only. If you are unsure about a particular case, ask support.