We are looking for an MFA solution as extra protection for our Windows domain. I tried a couple of them; Duo and Userlock. They offer device-based MFA for Windows. Which is fine if you want extra protection for your pc. However, they don't provide MFA on Domain level. If the MFA client software isn't installed on a pc, a user can simply logon to a domain without MFA.
I have studied ESET Secure Authentication. And I wonder how Windows logon requires MFA. The server part of Secure Authentication can integrate with AD, which is promising. But the part about Windows Login protection talks about installing client software. To me, this looks like the Windows Logon part of Secure Authentication works the same as Duo and Userlock? I.e. without client software, you can simply logon without MFA.
Any thoughts on this?
Simon_Weel received kudos from Trooper in Windows logon and MFA