https://www.googleforeducommunity.com/t5/Peer-Peer-Topics/2FA-via-Google-Admin-Trusting-Device/m-p/586#M303 <P>I've set up the <I>Google Session Control</I>, to 20 hours, to force a proper login once a day, and disallow <I>Trust device</I>.</P><P>For Chromebooks you also have to disable the <I>Show Profile on Login</I> setting, or it will not force 2FA.</P> Sat, 12 Aug 2023 22:03:25 GMT Kim_Nilsson 2023-08-12T22:03:25Z https://www.googleforeducommunity.com/t5/Peer-Peer-Topics/2FA-via-Google-Admin-Trusting-Device/m-p/579#M302 <P>Was wondering if there's a way of setting things up in the admin console so that it prompts a person to use their 2FA key (yubikey currently) once a day for chromebooks/boxes? Was poking around in the authentication center and the only way I see to not force them to use the key <EM>every time</EM> they log into the chrome device is to trust the device. Granted I haven't checked whether chrome devices actually respect trusting devices yet.</P> Fri, 11 Aug 2023 16:17:59 GMT https://www.googleforeducommunity.com/t5/Peer-Peer-Topics/2FA-via-Google-Admin-Trusting-Device/m-p/579#M302 MattDPenn 2023-08-11T16:17:59Z https://www.googleforeducommunity.com/t5/Peer-Peer-Topics/2FA-via-Google-Admin-Trusting-Device/m-p/586#M303 <P>I've set up the <I>Google Session Control</I>, to 20 hours, to force a proper login once a day, and disallow <I>Trust device</I>.</P><P>For Chromebooks you also have to disable the <I>Show Profile on Login</I> setting, or it will not force 2FA.</P> Sat, 12 Aug 2023 22:03:25 GMT https://www.googleforeducommunity.com/t5/Peer-Peer-Topics/2FA-via-Google-Admin-Trusting-Device/m-p/586#M303 Kim_Nilsson 2023-08-12T22:03:25Z