Duo Microsoft Rdp



Skip to end of metadataGo to start of metadata

Duo Authentication for Microsoft Remote Desktop Web Access adds two-factor authentication protection to RD Web portal browser logons. When logging on to the RD Web portal, users receive the Duo enrollment or authentication page after primary authentication.

  1. The Duo RDP integration will add two-factor authentication to all Windows login attempts, whether via a local console or over RDP, unless you select the “Only prompt for Duo authentication when logging in via RDP” option in the installer. If two-factor is enabled for both RDP and console logons, it may be bypassed by restarting Windows into Safe Mode (e.g. in case of a configuration error).
  2. This RDP integration doesn’t support inline self-service enrollment. Any users of the system must have a device enrolled prior to attempting to authenticate.
Duo microsoft rdp free

Prerequisites

Microsoft

Microsoft Remote Desktop I keep going back and forth about picking up the Surface Duo, and a lot of it is just knowing how things will work on it. An important application for me is Microsoft Remote Desktop. Duo Security (provides a drop-in integration for Microsoft RDP and Windows Logon that is easy to deploy, use, and manage. Duo integrates with Microsoft Windows client and server operating systems to add two-factor authentication (2FA) to logins with a solution that balances security and usability. Access policies can be configured to block access to sensitive remote workstations from devices that are out of date or non-compliant with your security requirements.

Check your server versions before starting. This integration works with Windows Vista, Windows 7, Windows 8.1, Windows 10, Windows Server 2008 R2, Windows Server 2012 and R2, and Windows Server 2016.

Then:

Duo Microsoft Rdp
  1. Have all users for the system visit CAS at my.vcu.edu, so they can register for DUO service. (Note: If a user is already registered and need to register a new device, the user must login to CAS from a non-VCU location such as from the cellular network or from home.)
  2. Have your API keys1 on hand.
    • Submit a request for API keys either by calling the VCU helpIT Center or (for advanced users) submitting a ticket
  3. Download the Duo RDP Installer Package:

Run the Installer

Run the installer with administrative privileges to run it. Accept the license agreement and enter yourintegration key, secret key, and API hostname when prompted:

Test Your Setup

To test your setup, attempt to log in to your newly-configured system as the user you enrolled in the previous step.

Gateway

When auto-push is enabled (the default option), a popup will appear notifying you that a login request has been pushed to your phone. When it is not enabled, you will be able to select the authentication option on the login screen.

Duo Rdp Windows

If auto-push is disabled or if you click the Cancel button on the auto-push dialog, a popup will appear asking for a Duo passcode (either generated with Duo Mobile, sent via SMS, or generated with a hardware token).

Remember: if you find that the Credential Provider has locked you out of your Windows system (e.g. due to a configuration error), you can reboot into Safe Mode to bypass it.

Download Duo Microsoft Rdp

Notes

Duo Microsoft Rdp

Duo Authentication For Microsoft Remote Desktop Gateway On ...

API Keys

Cached

1: API keys are used to connect your DUO client instance to VCU's DUO service, and also ensure that your DUO authentication information is secured in transit.