Recommendations on isolated multifactor authentication solution

  1.    26 Feb 2018 #1

    Recommendations on isolated multifactor authentication solution

    Sorry for the unclear title (and I wasn't sure if this is the proper forum), but I am looking for recommendations on multifactor authentication solutions for Windows 10 Professional 1709 boxes that are disconnected from the Internet. In a test environment, we're being required to add some flavor of multi-factor authentication to a system that is not domain-joined, is not connected to anything other than a router and a few RHEL servers, and is in no way connected to the Internet.

    To complicate things, biometrics, including facial and fingerprint, are likely not going to be an approved solution. We already have PIV (CACs) smartcards in this environment, so being able to implement those would be great. IT would be great if the solution could extend to other hardware devices, such as the Cisco network gear, but that's not as important right now.
      My ComputerSystem Spec

  2. Masterchiefxx17's Avatar
    Posts : 434
    Windows 10 Professional 64bit
       04 Mar 2018 #2

    May I ask why a fingerprint reader on the system will not be allowed? That would be best for securing the offline PC. Plus, they aren't that expensive.

    You could look at using a local software tool and then using a USB hardware key. Or even something like a pre-bios encryption key that would lock the PC.

    How many PCs are we talking about here? Is there a limited budget?
      My ComputerSystem Spec

  3.    09 Mar 2018 #3

    Smart Card or some kind of access token device (like the RSA SecureID) should do the trick and comply with that policy.

    How Smart Card Sign-in Works in Windows (Windows 10)
    RSA SecurID Access
    Last edited by EdTittel; 09 Mar 2018 at 18:57. Reason: Shorten URLs
      My ComputersSystem Spec


Related Threads
Solved why do 2 Local Disks get isolated? in Drivers and Hardware
I have used USB storage devices in two USB ports recently, have removed the devices 162682 but those Local Disks stay empty when I insert another USB storage device into the SAME USB port? 162684
Fingerprint Authentication in Chillout Room
For those of us using fingerprint authentication.... :shock: Source: Flight diverted after woman discovers her husband is cheating on her Ironically I was just thinking about this (someone using your finger to unlock a device) and here we...
Solved How to Transfer Users between isolated computers. in User Accounts and Family Safety
Hello. Can you help me solve my USERS problem below? I have 30 New, Windows 10 v1703, stand alone computers - no network, no server... I need to add 53 users, identical list, to each computer. The data I enter for a NEW USER via MMC is:...
Isolated User Mode is off. in Virtualization
I have virtualised a physical machine today which is Windows 7 32 Bit and am trying to enable to vTPM chip. When I try to start the machine I receive the following error: 113792 However the option to enable Isolated User Mode is not available...
Multifactor Authentication in AntiVirus, Firewalls and System Security
First post here. Hey all. Any ideas on how to get multifactor authentication running on windows 10 on a domain with Active Directory? I have seen tutorials on getting it working with Azure. Maybe it's not possible yet?
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd
All times are GMT -5. The time now is 07:11.
Find Us