I’ve been looking around at various 2FA options for signing into Windows. At the moment, signing into the computer itself is the only thing we’re putting behind 2FA. I’m open to passwordless sign on, as well.
We are currently planning on using Duo, but I wanted to see if anyone had any other suggestions… we’re a bit worried about some of our users needing to rely on their cellphone.
A bit about our environment:
1) Each computer is used by multiple end users.
2) End users will be using multiple computers.
3) Convenience is pretty important.
I was looking into YubiKey but I’m not sure if it supports multiple users on multiple different computers. If I could just leave a USB key in a computer that you have to tap, that would be ideal (we’re mostly worried about remote cyber attacks).
We’ve thought about doing a fingerprint scanner but I’m cautious how quickly that will get dirty and stop reading properly.
I appreciate your time!