Creating the Duo Authentication for Windows Logon GPO Group Policy configuration settings can be applied to Duo for Windows Logon installations regardless of how the application was originally installed, but if multiple GPOs with Duo settings are assigned to a given system in AD (directly or via inheritance) then each GPO will be applied and the settings from the last policy to be applied become the effective settings. Any setting configured by a GPO is stored as a reg value in HKLM\Software\Policies\Duo Security\DuoCredProv, and overrides the original Duo installation settings (stored in the registry at HKLM\Software\Duo Security\DuoCredProv). The Duo_Authentication_for_Windows_Logon_Group_Policy_Settings.xlsx spreadsheet included in the downloaded zip file describes the Duo Authentication for Windows Logon configurable Group Policy settings in detail.
The Duo Authentication for Windows Logon Group Policy template lets you configure two types of settings: Duo Group Policy SettingsĬlient-side configuration options for Duo may be configured via Active Directory Group Policy.
Active Directory domain administrators may deploy or configure Duo Authentication for Windows Logon on domain member workstations using Group Policy Software Publishing and Group Policy Administrative Templates.
Duo integrates with Microsoft Windows client and server operating systems to add two-factor authentication to Remote Desktop and local logons.
0 kommentar(er)
