06-25-2018 10:40 AM
I must just be missing this…I’ve scrolled through here and don’t see it so let me ask: We have DUO working as advertised on all of our desktops. So far, so good.
My question is this - if you don’t install the DUO software on an endpoint then you don’t need it to login. Is there a way to tell the server (via AD or GPO maybe) to REQUIRE DUO authentication to allow logon?
Solved! Go to Solution.
06-25-2018 11:03 AM
Hey Andrew,
Please check out our Policy & Control documentation to see how the New User Policy can require new users to enroll or deny authentication entirely for un-enrolled users: Policy & Control | Duo Security.
Although it’s important to note in this case that Duo Authentication for Windows Logon doesn’t support inline self-service enrollment. We recommend using bulk enrollment to send your users unique self-enrollment links via email.
06-25-2018 11:03 AM
Hey Andrew,
Please check out our Policy & Control documentation to see how the New User Policy can require new users to enroll or deny authentication entirely for un-enrolled users: Policy & Control | Duo Security.
Although it’s important to note in this case that Duo Authentication for Windows Logon doesn’t support inline self-service enrollment. We recommend using bulk enrollment to send your users unique self-enrollment links via email.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide