--- title: How K12 Montana Helps School Admins Enforce 2FA Across Google Workspace --- # How K12 Montana Helps School Admins Enforce 2FA Across Google Workspace by [Jeff Patterson](https://www.k12mt.com/k12-montana/blog/author/jeff-patterson)   |   Mar 6, 2025 Setting up 2FA as an individual user is great. But if you're a Google administrator for your school district, you'll want to make sure every staff member has it enabled - not just the ones who opted in voluntarily. K12 Montana enforces 2FA across every district we manage, and this post covers how to do the same. Here's how to manage 2FA enforcement and handle the situations that inevitably come up. ### The Two-Week Window for New Employees When a new staff member's account is created, your Google Workspace setup generally gives them a two-week grace period to enroll in 2FA before enforcement kicks in. They'll receive an email with enrollment instructions. Most people get it done in time. If they miss the deadline, their account gets locked out of 2FA-enforced services. The fix is straightforward. ### Moving a User to the "MFA Enabled but Not Enforced" OU In the Google Admin Console, go to Directory, then Users. Find the user, hover over their name, click More options, then Change organizational unit. Move them to the MFA Enabled but not enforced OU. This gives them breathing room to complete their 2FA setup without being locked out. Once they've finished setup, move them back to their correct OU (staff, admin, etc.). ### Handling New Devices Got a staff member who got a new phone and can't receive their authentication codes anymore? Same process. Move them to the MFA Enabled but not enforced OU, then go to their User account, click the Security tab, scroll to 2-Step Verification, and turn it off. They'll need to re-enroll 2FA for their new device. Once done, move them back to the right OU. ### Why This Matters for Your District Inconsistent 2FA enforcement is a common vulnerability. It only takes one unprotected account to give an attacker a foothold. Getting all staff consistently enrolled and enforced is worth the administrative effort. Need help enforcing 2FA across your district's Google Workspace? Contact K12 Montana Inc. - we handle Google Admin setup and security configuration for Montana school districts. - [** ](https://www.facebook.com/sharer/sharer.php?u=https://www.k12mt.com/k12-montana/blog/how-k12-montana-helps-school-admins-enforce-2fa-across-google-workspace&title=How%20K12%20Montana%20Helps%20School%20Admins%20Enforce%202FA%20Across%20Google%20Workspace&picture=&description=) - - [**](http://www.linkedin.com/shareArticle?mini=true&url=https://www.k12mt.com/k12-montana/blog/how-k12-montana-helps-school-admins-enforce-2fa-across-google-workspace&title=How%20K12%20Montana%20Helps%20School%20Admins%20Enforce%202FA%20Across%20Google%20Workspace&summary=) - ** - [** ](http://www.printfriendly.com/print?url=https://www.k12mt.com/k12-montana/blog/how-k12-montana-helps-school-admins-enforce-2fa-across-google-workspace) #### About the author Jeff Patterson [Follow me on LinkedIn ](https://www.linkedin.com/in/patterson-jeff/) ### Related posts [ What the House FY27 Education Budget Means for Montana Schools ](https://www.k12mt.com/k12-montana/blog/what-the-house-fy27-education-budget-means-for-montana-schools) [ K12 Montana: Is Screen Time in Schools Finally Getting a Second Look? ](https://www.k12mt.com/k12-montana/blog/is-screen-time-in-schools-finally-getting-a-second-look) [ The World Is Drawing a Line on Social Media. What Does That Mean for Montana Schools? ](https://www.k12mt.com/k12-montana/blog/the-world-is-drawing-a-line-on-social-media.-what-does-that-mean-for-montana-schools) [ K12 Montana Alert: FCC Moves to Overhaul E-Rate, Putting Rural Montana Connectivity at Risk ](https://www.k12mt.com/k12-montana/blog/k12-montana-alert-fcc-moves-to-overhaul-e-rate-putting-rural-montana-connectivity-at-risk) [ What Montana Schools Need to Know About the FCC's New E-Rate Review ](https://www.k12mt.com/k12-montana/blog/what-k12-montana-schools-need-to-know-about-the-fccs-new-e-rate-review) ## Thank you for visiting the K12 Montana blog! ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Jeff Patterson", "url" : "https://www.k12mt.com/k12-montana/blog/author/jeff-patterson" }, "datePublished" : "2025-03-06T10:00:00.000Z", "headline" : "How K12 Montana Helps School Admins Enforce 2FA Across Google Workspace", "mainEntityOfPage" : { "@id" : "https://www.k12mt.com/k12-montana/blog/how-k12-montana-helps-school-admins-enforce-2fa-across-google-workspace", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://www.k12mt.com/hubfs/k12-4%20(2)-1.png" }, "name" : "K12 Montana Inc." } } ```