Blog Post

Core Infrastructure and Security Blog
4 MIN READ

Passwordless Authentication with FIDO2 Security Key for Remote Desktop Connection

Farooque's avatar
Farooque
Icon for Microsoft rankMicrosoft
Mar 28, 2025

This blog talks about how to go passwordless when authenticating with Remote Desktop.

Passwordless Authentication with FIDO2 Security Key for Remote Desktop Connection Hello Everyone, in this blog, we will explore how to use a FIDO2 security key to access a device using Remote Deskt...
Updated Mar 28, 2025
Version 2.0
Azure AD
Entra
entra id
passwordless
Zero Trust
igorscoff's avatar
igorscoff
Copper Contributor
Mar 29, 2025

I have been trying to explore this solution but encountered a Challenge. How can we authenticate on RDP for High Privileged Accounts from Onpremise AD? Such as Domain Admins. the WHFB does not work for such type of accounts because the password hash is not synced to Azure. Do you have any idea how to deal with this?

 

Farooque's avatar
Farooque
Icon for Microsoft rankMicrosoft
Mar 29, 2025

Heyigorscoff WHFB works for privileged accounts like domain admins. You can go for dual enrollment. However there are changes required to be done at Active Directory from permission perspective because these accounts are protected by AdminSDholder container.