[manyxcxi]

I found with admin rules turned up I was getting the same. And you can’t have different rules per service, such as daily for email but every time for Admin console. So I did what I probably should’ve done, created two different accounts for myself.

The admin account I only need every so often, but my regular account with no admin privileges follows our regular user domain settings around MFA session times, etc. and I’m rarely prompted now and it is awesome.

I highly recommend this approach as a balance of practical security and quality of life.

[littlecranky67]

But this requires a separate paid account, right?

[manyxcxi]

Pretty sure it would be at most $5 - I’ll have to double check. We pay for premium Active Directory (almost exclusively to get the extra security features), so that might be why it works.

So the answer really is, yeah, it’s got to be paid for one way or another. If you’re using AD you’re paying per user whether or not you’re paying for the M365 suite or not.

[littlecranky67]

Since I only use M365 for myself, so a single account, that is not a proper solution unfortunately - I might stay with GWorkspace probably.