This message was deleted.

Question really boils down to device registration on shared non persistent machines.

I am pretty sure that if you AAD hybrid-join the device, you shouldn't get that prompt.

👍

this? https://office365itpros.com/2022/02/14/azure-ad-keep-me-signed-in-kmsi/ I think you need to turn it on or off at a tenant level but there’s another option in there for conditional access but it applies to all apps