Hi All,

Windows 10 Pro
Windows 11 Pro

I have RDP set up on several Widows workstation such
that customers can remote into the work computers
from home with mstsc.

Problem: on some of them, I am now required to set
up multifactor authentication (MFA) to accept a log
on. What is the best way to do this?

https://rublon.com/pricing/ https://rublon.com/blog/how-to-use-microsoft-authenticator-with-remote-desktop/

looks good, but I'd rather not have to deal with
third part subscriptions.

Many thanks,
-T

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)

On 3/22/2024 10:13 AM, T wrote:

Hi All,

Windows 10 Pro
Windows 11 Pro

I have RDP set up on several Widows workstation such
that customers can remote into the work computers
from home with mstsc.

Problem: on some of them, I am now required to set
up multifactor authentication (MFA) to accept a log
on. What is the best way to do this?

https://rublon.com/pricing/ https://rublon.com/blog/how-to-use-microsoft-authenticator-with-remote-desktop/

looks good, but I'd rather not have to deal with
third part subscriptions.

Many thanks,
-T

It's not complicated enough.

https://github.com/bitwarden/clients/issues/6808

The best security comes from things we don't understand :-/

https://en.wikipedia.org/wiki/FIDO_Alliance

A FIDO2 key and a PIN might serve as the MFA.
2FA with smartphones potentially has some phishing holes.

Devices with a metal barrel are preferred, since they
don't bend like a plastic one would.

https://en.wikipedia.org/wiki/Multi-factor_authentication

Paul

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)

On 3/22/24 09:49, Paul wrote:

On 3/22/2024 10:13 AM, T wrote:

Hi All,

Windows 10 Pro
Windows 11 Pro

I have RDP set up on several Widows workstation such
that customers can remote into the work computers
from home with mstsc.

Problem: on some of them, I am now required to set
up multifactor authentication (MFA) to accept a log
on. What is the best way to do this?

https://rublon.com/pricing/
https://rublon.com/blog/how-to-use-microsoft-authenticator-with-remote-desktop/

looks good, but I'd rather not have to deal with
third part subscriptions.

Many thanks,
-T

It's not complicated enough.

https://github.com/bitwarden/clients/issues/6808

The best security comes from things we don't understand :-/

https://en.wikipedia.org/wiki/FIDO_Alliance

A FIDO2 key and a PIN might serve as the MFA.
2FA with smartphones potentially has some phishing holes.

Devices with a metal barrel are preferred, since they
don't bend like a plastic one would.

https://en.wikipedia.org/wiki/Multi-factor_authentication

Paul

Do you know of an open source solution?

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)

On 3/22/2024 8:06 PM, T wrote:

On 3/22/24 09:49, Paul wrote:

On 3/22/2024 10:13 AM, T wrote:

Hi All,

Windows 10 Pro
Windows 11 Pro

I have RDP set up on several Widows workstation such
that customers can remote into the work computers
from home with mstsc.

Problem: on some of them, I am now required to set
up multifactor authentication (MFA) to accept a log
on. What is the best way to do this?

https://rublon.com/pricing/
https://rublon.com/blog/how-to-use-microsoft-authenticator-with-remote-desktop/

looks good, but I'd rather not have to deal with
third part subscriptions.

Many thanks,
-T

It's not complicated enough.

    https://github.com/bitwarden/clients/issues/6808

The best security comes from things we don't understand :-/

    https://en.wikipedia.org/wiki/FIDO_Alliance

A FIDO2 key and a PIN might serve as the MFA.
2FA with smartphones potentially has some phishing holes.

Devices with a metal barrel are preferred, since they
don't bend like a plastic one would.

    https://en.wikipedia.org/wiki/Multi-factor_authentication

   Paul

Do you know of an open source solution?

You know I'm not a security guy, and I couldn't tell
if a solution was getting close or not.

https://fidoalliance.org/company/strongkey/

https://github.com/google/OpenSK

Paul

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)

XPost: alt.comp.os.windows-11

On 3/22/24 07:13, T wrote:

Hi All,

Windows 10 Pro
Windows 11 Pro

I have RDP set up on several Widows workstation such
that customers can remote into the work computers
from home with mstsc.

Problem: on some of them, I am now required to set
up multifactor authentication (MFA) to accept a log
on. What is the best way to do this?

https://rublon.com/pricing/ https://rublon.com/blog/how-to-use-microsoft-authenticator-with-remote-desktop/

looks good, but I'd rather not have to deal with
third part subscriptions.

Many thanks,
-T

Follow up:

Took me forever to find it, but this is the best
for Remote Desktop to (not from) a Desktop.

https://rohos.com/

15 day trial

And it is cheap: 32 U$D each.

Does not require a cloud anything or a Windows server.
It all runs on the workstation.

I have my customer using it with FreeOPT to
generate the tokens.

And I have to say, I like it.

-T

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)