Credential Guard and MFA

André Borgeld 431 Reputation points
2022-05-28T08:09:31.617+00:00

Dear contributors,

In Microsoft Azure i've implemented conditional access and that works fine.

Now I want to know if on prem credential guard is enough protecting your credentials or is AND/AND better?

What i mean is do i still need on PREM MFA beside Credential Guard?

Kind regards,

Windows Server
Windows Server
A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.
12,083 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,389 questions
0 comments

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. ELBANNOUNI.MOHAMMED 81 Reputation points
    2022-05-28T11:53:50.54+00:00

    Un accès conditionnel regroupe des signaux pour prendre des décisions et appliquer des stratégies organisationnelles. L’accès conditionnel Azure AD est au cœur du nouveau plan de contrôle basé sur les identités.

    Conceptual Conditional signal plus decision to get enforcement

    Les stratégies d’accès conditionnel, dans leur forme la plus simple, sont des instructions if-then : si un utilisateur souhaite accéder à une ressource, il doit effectuer une action. Exemple : Un responsable paie souhaite accéder à l’application de paie et il doit effectuer une authentification multifacteur pour y accéder.

    0 comments
  2. André Borgeld 431 Reputation points
    2022-05-28T12:14:40.883+00:00

    I know and in Azure Conditional Access with MFA challenge works great.
    Only we have servers On Prem and even with a Device Join you cannot use Azure MFA for On Prem Windows. You need to implement Windows Hello with RDS and NPS. So i wonder would Credential Guard (Defender) a good option instead of MFA or do i still need to create an MFA solution for on Prem servers besides Credential Guard.

    0 comments