MFA for RDS running AADDS setup

Question

Hello,

I need some input about a RDS-server environment (AADDS joined) located in Azure & running on a AADDS setup:
rds-azure-adds

The rest of the environment is a hybrid environment running a local ADDS with AAD-Connect.
Source of users/devices is mixed between synced from local ADDS/native AAD.

Users are connecting to this solution via a : https://azureservername.domain.net

I'm looking into a MFA-solution for the RDS.

I have not run into this specific scenario before but I believe the standard setup with the NPS extension won't work in this scenario due to the RDS AADDS setup. Does anyone here have any experience with and a solution for this scenario?

Answer 1

Hello @Leakim79 ,

Thanks for reaching out.

AAD DS does not directly support MFA, but you Use Remote Desktop Services (RDS) and Network Policy Server (NPS) integrate Azure AD Multi-Factor Authentication to provide an additional authentication prompt during sign-in events.

This article shows you how to configure RDS in Azure AD DS and optionally use the Azure AD Multi-Factor Authentication NPS extension.

Hope this helps.

-----
Please "Accept the answer" if the information helped you. This will help us and others in the community as well.