1,960 questions
Hi @Deni Garo , unfortunately Azure MFA does not have a good solution for this. My colleague goes into detail here about this. Please let me know if you have any questions.
Best,
James
Azure MFA on local logins and computers
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(121.6, 85%, 21%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EDG%3C/text%3E%3C/svg%3E)
Deni Garo
41
Reputation points
Hi all,
Is it possible to use azure mfa on local computer logins, I mean when user starts the computer in the morning and tries to login to get redirected to use MFA signin (through authenticator). If he or she tries to use the computer that is not accepted by the company user will get access denied?
Is this possible with azure MFA (Something like DUO for computers)
{count} votes
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(102.4, 90%, 19%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ERK%3C/text%3E%3C/svg%3E)
Runyon, Ken 1 Reputation point2021-08-27T12:37:08.443+00:00 This is a regular and recurring question. In my State we will soon be required to implement MFA for local access. The MS MFA answer in this regard is driving organizations to other, more costly, solutions. Without an easy to implement MFA option for local window's login, MS is positioning itself poorly. I love the way the Azure conditional access works but there are decisions that just make no sense. Such as why the lack of a local login MFA option.
Sign in to comment
1 answer
Sort by: Most helpful
-
James Hamil 21,621 Reputation points Microsoft Employee2021-02-08T21:06:16.753+00:00 -
Deni Garo 41 Reputation points
2021-02-09T12:37:19.077+00:00 Hi James,
Is there anything we can do with conditional access polices and azure mfa to combine these 2 to get protection on local logons? If we join computers to azure ad and configure conditional access, will mfa protect local logons or there is no option for this?
-
James Hamil 21,621 Reputation points Microsoft Employee
2021-02-09T23:32:07.247+00:00 Hi @Deni Garo , Windows Hello for business is good for this. It's not Azure MFA but it's good authentication. Please let me know what you think, and I can answer any questions you have about it!
Best,
James -
Deni Garo 41 Reputation points
2021-02-10T07:14:47.617+00:00 Hi James,
Thank you for the answer. Problem with windows hello is that we can fallback to pass login. What would you recommend when it comes to protecting internal resources. Shall we configure conditional access or is there something else to implement to get higher security?
Many thanks for your help James
Sign in to comment -