I have Duo Security set up with Windows Remote Desktop so that when I RDP to my Windows 10 machine, I get a Duo Security alert that is needed to log in.
However I have discovered that if I cancel the Duo Popup on my Windows PC, at the bottom Left corner of the Windows Login screen, there are two rectangular boxes for my userid. If I click on the second one, it wants me to authenticate via Due Security but if I click on the first one, I can simply bypass Duo Security and log in without Duo requiring me to authenticate via MFA!
I can’t believe it would be so easy to work around Duo Security. Is there a way I can stop that first login option from appearing so that Duo can’t be bypassed?