Cheap/Free 2FA (OTP preferred) for Windows Domains/RDP?

Discussion in 'Business & Enterprise Computing' started by NSanity, Feb 3, 2016.

  1. NSanity

    NSanity Member

    Joined:
    Mar 11, 2002
    Messages:
    18,355
    Location:
    Canberra
    Having a bit of a looksee at the moment.

    Looking for something that can be implemented < $1000 with < $50 user cost. Probably prefer a FOB over SMS (but an option to do either would be sweet).

    Thoughts?

    If i can do something Multi-tenanted (in terms of 2fa host verification) that would be a plus.
     
    Last edited: Feb 3, 2016
  2. obi

    obi Member

    Joined:
    Oct 16, 2004
    Messages:
    127
  3. Crusher

    Crusher Member

    Joined:
    Aug 27, 2001
    Messages:
    3,069
    Location:
    Sydney & Adelaide
  4. TehCamel

    TehCamel Member

    Joined:
    Oct 8, 2006
    Messages:
    4,183
    Location:
    Melbourne
    Authanvil? no idea on cost, but it's got an app for iphone/android/winmo

    dunno if it works with multitenancy and where there might be an issue is if a person needs an authanvil for separate organisations, looks like you can only link a phone to one at a time
     
  5. aza2001

    aza2001 Member

    Joined:
    Sep 14, 2002
    Messages:
    2,016
    Location:
    Northmead
    Does your firewall have 2FA inbuilt?
     
  6. greebs

    greebs Member

    Joined:
    Dec 30, 2001
    Messages:
    958
    Location:
    Melbourne
    Duo was my first thought too.

    Quest/Dell Defender is another option, but I'm unsure on the current pricing.
     
  7. Dre_

    Dre_ Member

    Joined:
    May 25, 2014
    Messages:
    841
    Azure AD Premium?
    Can either be per user or per authentication request

    SMS, Call or App
     
  8. DavidRa

    DavidRa Member

    Joined:
    Jun 8, 2002
    Messages:
    3,086
    Location:
    NSW Central Coast
    Yubikeys with AuthLite could be an option? Have implemented this a while back as an AD-integrated solution, IIRC it was AD username and fob for password (it's a long encoded string, the Yubikey just types it straight into the password field). Might be right at the edge of (or exceed) your preferred budget though.
     
  9. JumpingJack

    JumpingJack Member

    Joined:
    Jun 16, 2002
    Messages:
    289
    Would be right to say wait 6 months until Microsoft Edge has native support for u2f?
     

Share This Page

Advertisement: