Microsoft give my work them admin privileges over my laptop at home because I use authenticator at work.

Question

Microsoft give my work them admin privileges over my laptop at home because I use authenticator at work.

Nancy Mariette Jimison 0

I have to two-step my identity at work with my personal iPhone authenticator app. This seems to allow my work to take priority over my personal microsoft account. It has forbidden downloads and file sharing.

I have also had error messages about an undefined "problem with the service" of authenticator on my home laptop, despite submitting the correct code.

Nancy Mariette Jimison 0 Reputation points

2026-05-22T10:51:17.2133333+00:00

I have an iPhone and Microsoft Phone Link does not support connecting to an iPhone. I feel this leaves my verification vulnerable.
Carolyne 1,151 Reputation points Microsoft Employee

2026-06-04T06:14:56.13+00:00

Hi Nancy!
Using the Authenticator app on your personal phone for work MFA does not give your employer admin control over your personal devices — the Authenticator app only generates codes and approves sign-ins, it doesn't grant device management. The download restrictions and file-sharing blocks you're seeing on your home laptop are likely caused by a Conditional Access policy or Intune device compliance policy tied to your work account sign-in (not the Authenticator app itself). If you're signed into your work account on your home laptop, those policies can restrict what you do in that work context. Could you check with your IT Admin if they have an Intune policy in place.

Your answer

Nancy Mariette Jimison 0 Reputation points

2026-05-22T10:51:17.2133333+00:00

I have an iPhone and Microsoft Phone Link does not support connecting to an iPhone. I feel this leaves my verification vulnerable.
Carolyne 1,151 Reputation points Microsoft Employee

2026-06-04T06:14:56.13+00:00

Hi Nancy!
Using the Authenticator app on your personal phone for work MFA does not give your employer admin control over your personal devices — the Authenticator app only generates codes and approves sign-ins, it doesn't grant device management. The download restrictions and file-sharing blocks you're seeing on your home laptop are likely caused by a Conditional Access policy or Intune device compliance policy tied to your work account sign-in (not the Authenticator app itself). If you're signed into your work account on your home laptop, those policies can restrict what you do in that work context. Could you check with your IT Admin if they have an Intune policy in place.