question

RenatoPereira avatar image
0 Votes"
RenatoPereira asked MarileeTurscak-MSFT answered

W10 PRO - M.F.A for O365 ACCOUNT (AZURE ACTIVE DIRECTORY PREMIUM p1/p2) as Cisco Duo does

Hi,

We have a customer concerned with the computer used by the FINANCIAL employee. Does anyone if MS has a tool for enable M.F.A during eache Windows logon, as Cisco DUO does in this vídeo below?
https://youtu.be/eQK3VxeKxWA?t=390



usefull links:


https://allthingscloud.blog/oath-totp-hardware-tokens-with-azure-multi-factor-authentication


https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-mfa-howitworks

The following additional forms of verification can be used with Azure AD Multi-Factor Authentication:

azure-active-directory
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

RenatoPereira avatar image
0 Votes"
RenatoPereira answered
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

RenatoPereira avatar image
0 Votes"
RenatoPereira answered

I found another option from ESET

https://www.eset.com/us/business/solutions/identity-and-data-protection/?utm_source=expert-insights&utm_medium=affiliate&utm_campaign=2fa&sfdccampaignid=7011n000000JpuRAAS%20#secure-authentication

Protection support
Virtual Private Networks (VPN), Remote Desktop Protocol (RDP), Outlook Web Access (OWA), VMware Horizon View and RADIUS-based services are all natively supported by ESET Secure Authentication.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

RenatoPereira avatar image
0 Votes"
RenatoPereira answered RenatoPereira edited

Accordingly to ESET distributor, the product 'ESET Secure Authentication' can handle Windows login; but here in a LAB environment, seems that it requires an 'authentication server' running Database also - since we have more and more customers going to the cloud and replacing local servers, we will try 'Cisco Duo'.



123322-eset-secure-authentication.png



5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

MarileeTurscak-MSFT avatar image
0 Votes"
MarileeTurscak-MSFT answered

Windows Hello For Business sounds like the best solution for you. It essentially enforces 2FA every time a user logs into a device. https://docs.microsoft.com/en-us/windows/security/identity-protection/hello-for-business/hello-overview

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.