question

TakamiChiro-9744 avatar image
0 Votes"
TakamiChiro-9744 asked Peiris-2218 commented

Implement MFA for Active DIrectory sign on

hi everyone,

Hope you are all doing well.

I just start to do research on this. We are considering turning on MFA for our Active DIrectory user sign on. We are not on Azure (except the fact that our email is thru Office 365). We are still running 2012 scheme and domain controllers (but will upgrade them all to 2016). 95% of the users are running windows 10.

Do you know if Microsoft provide built-in MFA for domain sign on? Or I need to purchase a product to achieve it ? IF the answer is latter...do you have any good product you are using?

Thank you for your help in advance.


Takami Chiro

windows-active-directory
· 2
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hello @TakamiChiro-9744,
How are things going on your end? Please keep me posted on this issue.
If you have any further questions or concerns about this question, please let us know.
I appreciate your time and efforts.

Best Regards,
Daisy Zhou

============================================
If the Answer is helpful, please click "Accept Answer" and upvote it.

0 Votes 0 ·

Hello @TakamiChiro-9744,
I just want to confirm the current situations.
Please feel free to let us know if you need further assistance.


Best Regards,
Daisy Zhou

============================================
If the Answer is helpful, please click "Accept Answer" and upvote it.

0 Votes 0 ·

1 Answer

DaisyZhou-MSFT avatar image
0 Votes"
DaisyZhou-MSFT answered Peiris-2218 commented

Hello @TakamiChiro-9744,

Thank you for posting here.

Here are the answers for your references.

Q: Do you know if Microsoft provide built-in MFA for domain sign on? Or I need to purchase a product to achieve it ?
A: Based on my knowledge, you are using on-premise Active Directory, there is no built-in MFA for domain sign on from Microsoft.

Q: IF the answer is latter...do you have any good product you are using?
A: Based on my knowledge, if you use Azure AD, Microsoft provide built-in MFA for domain sign on, for more information about Azure AD MFA, please refer to link below.

Secure access to resources with multifactor authentication
https://www.microsoft.com/en-us/security/business/identity-access-management/mfa-multi-factor-authentication

And if you want to know more information about Microsoft Azure AD MFA, please open a new post by selecting Azure Active Directory tag or Azure-ad-multi-factor-authentication tag.

And for on-premise Active Directory, if you want to know MFA, you can google in the internet and see if there is any third-part MFA.

Hope the information above is helpful.

Should you have any question or concern, please feel free to let us know.


Best Regards,
Daisy Zhou

============================================
If the Answer is helpful, please click "Accept Answer" and upvote it.

· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

@Daisy Zhou,

I also have this requirement.

We don't use Azure or O365.

But we need to integrate MFA for our on-prem active directory users.

How can I do this?

If it's not possible with any available MS technology, please let me know the way.

Please make sure to mention recommendations

0 Votes 0 ·