I have two Windows 11 machines that I previously had the software installed on, then later uninstalled, all done through the ADSSP web GUI. It does not show those machines under the installed list. However, any time my ADSSP server is unreachable for whatever reason, users on those two machines are unable to log in, being given the message that the server is unreachable and they need to contact an administrator.

These users were not previously enrolled in MFA, so why are they not bypassing this to begin with? Even if the software was installed, in the server settings I have not enforced enrollment. I have also specifically enabled the "skip MFA when the server is down or unreachable". So all of these settings are being ignored, and are still sticking around somewhere on the machines even after uninstalling the software.

I realize this is actually a few issues that are all related:

1. Whenever the ADSSP server is down, a machine with the MFA software installed on it is essentially locked out. No user can log in even if they're not enrolled, and even if the setting to skip MFA when server is unreachable is checked. 

2. These settings are sticking on computers that I have uninstalled the MFA software from. So some registry entries are perhaps not removed during uninstallation.

Any help is appreciated.