Duo Login Denied? Match the Authentication Log to the User, App and Policy
Use one timestamped attempt to distinguish a Duo denial, a missing event and a downstream application failure without broad policy changes.
Read article 
Duo Offline Windows Login Not Working? Check Enrollment and Remaining Access
Separate a Windows password failure from password-based Duo offline enrollment, factor and expiry problems on an authorized local console.
Read article
Duo Mobile on a New Phone: Choose the Right Reactivation Path
Choose between an available self-service route and administrator-assisted reactivation, with a clear warning about invalidating the existing activation.
Read article