Aug 04 2021 03:35 AM
Hi,
It should be useful having 2 Factor Authentication for Windows Logon and RDP Logon.
Tip solution 1:
A. In Logon window the user write the first password (by the way, make max length longer and activate Paste and Copy)
B. Then the user receives a notification from App on his smartphone and he can insert the second password)
-------------------------------------------------------------
Tip solution 2 (stronger and more convenient):
In Logon window the user choose to load the first password from a cyphered wallet on a pen drive (the cyphered wallet on a pen drive has been created previosly by Windows, which even created a 'Long Casual Password' for Logon)
So the system:
A. Sends to a notification to th App on User's smartphone and the User can insert his 'Short password'
B. Then the system accesses to the cyphered wallet on User's pen drive and retrieves the 'Long Casual Password' for logon
Aug 04 2021 06:04 AM
Nov 18 2021 02:03 PM
@Reza_Ameri This response is a total ignorance of the nature of the request. Everyone in the modern world has a smart phone. We can and should be able to authenticate logins (remote and at end terminal systems) via verifying a 2nd factor. That can and should offer Text Message, E-Mail, Automated Phone Call (with code), and some "talk to a person" option if all else fails. This is not a joke, it is important and a major security concern.
Jan 04 2022 12:53 PM
@Reza_Ameri MFA using push notifications is massively more secure than existing Windows Hello solutions.
The argument that PIN + device or Face + Device is MFA is unreasonable. The technology is literally already there.
This is definitely needed.
Jan 05 2022 12:53 AM
Jan 05 2022 05:58 AM
Jan 05 2022 07:23 AM
Apr 29 2022 07:54 AM
Oct 26 2022 11:00 PM
@Reza_Ameri It's more secure than using a single factor alone and it's good enough for all the other services that use MFA. The odds of someone having your password or pin and hacking your phone in some way are slim to none. We should be able to use MFA at PC login.