Authorizing Microsoft Service Centers

As a crucial step in ensuring the security of your Windows-based systems, it is essential to understand how to configure and use authorized MSI service centers. This article provides valuable insights into the process, highlighting key details that will help you navigate the setup.

Windows Requirements

Before proceeding, ensure that all Windows users have passwords enabled for logins. For more information on using Duo with a Microsoft account, please refer to Can I Use Duo with a Microsoft Account?

Additional Configuration Needed

In some cases, additional configuration may be necessary when logging in using a Microsoft-attached account. To protect local console logons with Duo, kindly consult the FAQ section for guidance on securing your Windows installation.

Duo Authentication for Windows Logon

The installation process adds two-factor authentication to all interactive user Windows login attempts, whether via a local console or over RDP, unless you select the 'Only prompt for Duo authentication when logging in via RDP' option during setup. It is crucial to review these compatibility and installation notes before proceeding.

Exclusions

Duo's Windows Logon client does not add a secondary authentication prompt to the following logon types:

* Credentialed User Access Control (UAC) elevation requests

* Logins at the local console and/or incoming Remote Desktop (RDP) connections

Pre-Logon Access Providers (PLAPs)

The installation process also excludes Pre-Logon Access Providers, such as Windows Always On VPN, Log on as a Service, Log on as Batch, Scheduled Tasks, drive mappings, etc.

PowerShell and Run-as Options

In v4.1.0 and later, the Duo Authentication for Windows Logon client does not add a secondary authentication prompt to PowerShell 'Enter-PsSession' or 'Invoke-Command' cmdlets, nor to Shift + right-click 'Run as different user' or Right-click + 'Run as administrator' options.

Summary

In conclusion, this article highlights the essential steps and considerations for authorizing Microsoft service centers. By understanding these requirements and exclusions, you can ensure a secure and seamless experience when using Duo Authentication for Windows Logon. Be sure to read through these instructions carefully before downloading and installing Duo for Windows Logon.

Authorized msi service center