Forum Discussion

JHanson1821's avatar
JHanson1821
Copper Contributor
May 12, 2021

Enabling MFA on admin level access to On premise AD

Hello everyone. I've run into a puzzler and I'm hoping someone can give me a tip on how to solve this. I have received a "cyber security attestation" document from a major insurance provider and must...
SamLourie's avatar
SamLourie
Copper Contributor
Dec 04, 2021

I would look into MFA solutions offered by DUO. Very easy to implement.

  • JHanson1821's avatar
    JHanson1821
    Copper Contributor
    Dec 06, 2021

    SamLourie 

    The Duo solutions do NOT protect active directory, they only protect logins to endpoints. That endpoint could be a workstation, a member server or a Domain Controller. There are a number of scenarios where that is not sufficient. If a computer somehow doesn't have Duo on it (byod or it simply got missed). RSAT. Remote Powershell. 

     

    • SamLourie's avatar
      SamLourie
      Copper Contributor
      Dec 06, 2021
      That’s a shame I was not was NOT helpful Joel. Hopefully you do NOT run in to any further road blocks, As I canNOT be of any further assistance I shall NOT reply any further. All the best on your quest buddy!
      • KentMitchell's avatar
        KentMitchell
        Icon for Microsoft rankMicrosoft
        Apr 12, 2022

        In addition to the prior answers, you can also find information on multi-factor authentication (MFA) in the Plan your Passwordless Deployment Setup Guide, specifically go to the Combine registration section.

         

        The Plan your Passwordless Deployment Setup Guide in the Admin Center simplifies selecting and deploying the right authentication method for IT Admins.

         

        Note: If you don't have Microsoft 365 admin permissions, open the guide in a test or POC tenant to get instructions.

Resources