2FA Office 365/RDS

[itgeek]

Hi,

 

Please can someone tell me if you can deploy 2FA for staff using the free version of office 365? We do have an OVS license for our on-prem office/windows/server cals etc.

 

Ideally what I would like to setup is 2FA for office365 and our RDS server.

 

TIA

[mavhc]

Microsoft accounts? Yes, you can enable or enforce it. But to do it for only staff would probably require some manual selection of who to enable it for

 

RDP no, but you can set up Azure Proxy, which is also free, to enable that.

[FN-GM]

RDP no, but you can set up Azure Proxy, which is also free, to enable that.

 

It’s not free as such. It’s included in the P1 / P2 license.

 

https://learn.microsoft.com/en-us/azure/active-directory/app-proxy/application-proxy-faq

[itgeek]

Thanks for the information. I can imagine that some of our staff will not want to use their own mobiles etc. Have you deployed any OATH hardware token for users that are not able to use their mobiles?

[mavhc]

It’s not free as such. It’s included in the P1 / P2 license.

 

https://learn.microsoft.com/en-us/azure/active-directory/app-proxy/application-proxy-faq

 

Well, I've not paid them anything except for Office

[ChrisC]

Thanks for the information. I can imagine that some of our staff will not want to use their own mobiles etc. Have you deployed any OATH hardware token for users that are not able to use their mobiles?

Just a heads up if you're looking at using the Azure MFA plugin to secure RDS, at the moment you're limited to phone call or push notification/app approval, there's no native support for OTP authentication as it doesn't present any inputs to enter a code.

[mavhc]

Just a heads up if you're looking at using the Azure MFA plugin to secure RDS, at the moment you're limited to phone call or push notification/app approval, there's no native support for OTP authentication as it doesn't present any inputs to enter a code.

 

That's an alternative option to Azure Proxy, right?