Some field employee computers' internal clocks get out of sync with real time, which causes issues with Duo authentication that relies on accurate timing. Most of the time, the following steps will resolve it without any special visit to IT staff.
For IT (try this first):
1. Make sure the user has the computer connected to some sort of internet (Home Wi-Fi or Hotspot) at the login screen.
2. While its sitting on the network. Active your PIM role, sign into Intune.
3. Click on Devices, and Windows. Search for the device in question. Click it.
4. On the Device Page, click Sync. Then Yes.
5. Let the device sit for a few (5 to 15 minutes) and see if the time changes to match.
(If the above fails, try having the user do the below and also repeat above steps after they have done the below.)
For Users (try this second):
To access UEFI on a Microsoft Surface, follow the following steps:
- Shut down your Surface and wait about 10 seconds.
- Press and hold the volume-up button.
- While holding the volume-up button, press and release the power button.
- Continue holding the volume-up button until the UEFI screen appears.
When the UEFI appears (picture below), navigate to the date and time option on the left.
Open this link on your phone to have the time displayed on it: Current local time in Columbia, South Carolina, United States (worldtimeserver.com)
Set the new date and time (make sure to follow the format above it) to the exact second. For best results, type a time a few seconds ahead then press Enter the moment that time arrives on your phone.
Reboot the PC, connect to Wi-Fi, and try logging in. If it fails, repeat the steps above one more time. If it still fails, report what happened to IT. In a few occasions, we've had to bring a device to one of the IT offices in Columbia for a brief hands-on session.
