NTMLv2 Known issue

Update @Justinha

Author: Beck-Meyer

articles/active-directory/authentication/multi-factor-authentication-faq.yml

@@ -247,11 +247,20 @@ sections:
           
           A workaround for this error is to have separate user accounts for admin-related and non-admin operations. Later, you can link mailboxes between your admin account and non-admin account so that you can sign in to Outlook by using your non-admin account. For more details about this solution, learn how to [give an administrator the ability to open and view the contents of a user's mailbox](https://help.outlook.com/141/gg709759.aspx?sl=1).
           
+      - question: |  
+      
+          What are the possible reasons why a user(s) is failing with the error code: LsaLogonUser failed with NTSTATUS -1073741715 for MFA Server.
+
+       answer: |
+          Error 1073741715 = Status Logon Failure -> The attempted logon is invalid. This is either due to a bad username or authentication.
+
+          A plausible reason for this: If the primary credentials entered are correct, there could be a mismatch between the supported NTLM version on the MFA server vs. the Domain Controller. MFA Server only supports NTLMv1 (LmCompatabilityLevel=1 thru 4) and not NTLMv2 (LmCompatabilityLevel=5)
+          
 additionalContent: |
   ## Next steps
     If your question isn't answered here, the following support options are available:
           
     * Search the [Microsoft Support Knowledge Base](https://support.microsoft.com) for solutions to common technical issues.
     * Search for and browse technical questions and answers from the community, or ask your own question in the [Azure Active Directory Q&A](/answers/topics/azure-active-directory.html).
     * Contact Microsoft professional through [Azure Multi-Factor Authentication Server support](https://support.microsoft.com/oas/default.aspx?prid=14947). When contacting us, it's helpful if you can include as much information about your issue as possible. Information you can supply includes the page where you saw the error, the specific error code, the specific session ID, and the ID of the user who saw the error.
-    * If you're a legacy PhoneFactor customer and you have questions or need help with resetting a password, use the [[email protected]](mailto:[email protected]) e-mail address to open a support case.
+    * If you're a legacy PhoneFactor customer and you have questions or need help with resetting a password, use the [[email protected]](mailto:[email protected]) e-mail address to open a support case.