Forum Discussion

JHanson1821's avatar
JHanson1821
Copper Contributor
May 12, 2021

Enabling MFA on admin level access to On premise AD

Hello everyone. I've run into a puzzler and I'm hoping someone can give me a tip on how to solve this. I have received a "cyber security attestation" document from a major insurance provider and must...
JHanson1821's avatar
JHanson1821
Copper Contributor
Dec 06, 2021

SamLourie 

The Duo solutions do NOT protect active directory, they only protect logins to endpoints. That endpoint could be a workstation, a member server or a Domain Controller. There are a number of scenarios where that is not sufficient. If a computer somehow doesn't have Duo on it (byod or it simply got missed). RSAT. Remote Powershell. 

 

SamLourie's avatar
SamLourie
Copper Contributor
Dec 06, 2021
That’s a shame I was not was NOT helpful Joel. Hopefully you do NOT run in to any further road blocks, As I canNOT be of any further assistance I shall NOT reply any further. All the best on your quest buddy!
  • KentMitchell's avatar
    KentMitchell
    Icon for Microsoft rankMicrosoft
    Apr 12, 2022

    In addition to the prior answers, you can also find information on multi-factor authentication (MFA) in the Plan your Passwordless Deployment Setup Guide, specifically go to the Combine registration section.

     

    The Plan your Passwordless Deployment Setup Guide in the Admin Center simplifies selecting and deploying the right authentication method for IT Admins.

     

    Note: If you don't have Microsoft 365 admin permissions, open the guide in a test or POC tenant to get instructions.

    • Fresh1337's avatar
      Fresh1337
      Copper Contributor
      Nov 09, 2023

      Silverfort is a solution which can help you fulfilling your cyber insurance requirements as it can put MFA and even conditional access policies on any kind of on-prem AD authentication without the need to install agents on the systems you want to protect.

Resources