This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
Hi all,
Is it possible to use azure mfa on local computer logins, I mean when user starts the computer in the morning and tries to login to get redirected to use MFA signin (through authenticator). If he or she tries to use the computer that is not accepted by the company user will get access denied?
Is this possible with azure MFA (Something like DUO for computers)
This is a regular and recurring question. In my State we will soon be required to implement MFA for local access. The MS MFA answer in this regard is driving organizations to other, more costly, solutions. Without an easy to implement MFA option for local window's login, MS is positioning itself poorly. I love the way the Azure conditional access works but there are decisions that just make no sense. Such as why the lack of a local login MFA option.
Hi @Deni Garo , unfortunately Azure MFA does not have a good solution for this. My colleague goes into detail here about this. Please let me know if you have any questions.
Best,
James
Hi James,
Is there anything we can do with conditional access polices and azure mfa to combine these 2 to get protection on local logons? If we join computers to azure ad and configure conditional access, will mfa protect local logons or there is no option for this?
Hi @Deni Garo , Windows Hello for business is good for this. It's not Azure MFA but it's good authentication. Please let me know what you think, and I can answer any questions you have about it!
Best,
James
Hi James,
Thank you for the answer. Problem with windows hello is that we can fallback to pass login. What would you recommend when it comes to protecting internal resources. Shall we configure conditional access or is there something else to implement to get higher security?
Many thanks for your help James