Hi

Try excluding these from MFA/CA

Microsoft command service

Microsoft activity feed service

Microsoft Device Directory Service