Sorry new to this community.
Would like to know if Duo on Windows can be set to only protecting UAC/run as administrator function?
We would like to run Duo on user computers, but we don’t need normal user login with 2FA. We just want to ensure when administrative credential is entered, this action is protected by 2FA and being logged. We would like to do this to ensure the action is done by legitimate admin person instead of stealing password of the user.
Of course the same principle may also apply to RDP with administrative accounts, but that’s another topic after we tackled the local login challenge.