Forum Discussion
Enabling MFA on admin level access to On premise AD
I would look into MFA solutions offered by DUO. Very easy to implement.
The Duo solutions do NOT protect active directory, they only protect logins to endpoints. That endpoint could be a workstation, a member server or a Domain Controller. There are a number of scenarios where that is not sufficient. If a computer somehow doesn't have Duo on it (byod or it simply got missed). RSAT. Remote Powershell.
- That’s a shame I was not was NOT helpful Joel. Hopefully you do NOT run in to any further road blocks, As I canNOT be of any further assistance I shall NOT reply any further. All the best on your quest buddy!
- KentMitchell
Microsoft
In addition to the prior answers, you can also find information on multi-factor authentication (MFA) in the Plan your Passwordless Deployment Setup Guide, specifically go to the Combine registration section.
The Plan your Passwordless Deployment Setup Guide in the Admin Center simplifies selecting and deploying the right authentication method for IT Admins.
Note: If you don't have Microsoft 365 admin permissions, open the guide in a test or POC tenant to get instructions.
Silverfort is a solution which can help you fulfilling your cyber insurance requirements as it can put MFA and even conditional access policies on any kind of on-prem AD authentication without the need to install agents on the systems you want to protect.
