Deployment Strategy

Hello, I am trying to deploy duo for window logon from GPO. GPO is failing to install MSI and if I try to run the msi manually I get the error duo authentication for windows logon x64 requires local administrator rights. The shares that the msi is on...

//GPO We have an existing DUO deployment pushed out via GPO. DUO is used for local Windows Logon authentication on Windows 10 domain joined devices. What is the recommended process for updating these clients? Retire the existing GPO and create a new...

We have multiple 365 tenants in our company that sync from 1 on-prem active directory. Think 1 OU per 365 tenant that gets synced back and forth. SO we have 1 DUO account with our AuthProxy servers that sync our 1 AD by Groups. 1 group per OU (depart...

This may be an incredible stupid question. But I have to ask. Here’s why. Some time ago, I tested IsDecicions Userlock as MFA solution. All fine and dandy. But: it only protects access to the pc that has the Userlock client installed. In other words;...

Hello I am trying to deploy DUO to VMs on Amazon and Oracle govt cloud. The procedures I have found are for non govt cloud Amazon, and Oracle support simply told me to ask DUO how to deploy to their VM in the cloud. So can anyone point me to the proc...

Hello We have a sitatuaiton where a company will migrate their Duo Protected AD into a new forest. The user ID will be retain but the old AD (which is synched with Duo) will be retired. What is th best strategy to follow is such cases ? In particular...

I am trying to deploy Duo RDP with the silent push parameters. Duo Security Duo Authentication for Windows Logon and RDP: FAQ Duo’s trusted access solution enables organizations to secure access to all work applicati...

We’re using MS 365 so our email server is in the cloud. When we send the enrollment email to our users and require 2FA, they can’t access their email because it’s now protected by Duo. What’s the process or sequence to have users enroll while still...

As far as I’m aware Duo does not classify it’s self as an IDP and instead will integrate with whatever your current IdP is. While looking into this a bit deeper there are some caveats. e.g. When trying to protect Google Workspace (GSuite) you can’t a...

I am testing deploying to our fleet of Windows devices for our domain admin, server admin and maybe for RDP for regular users. We do leave the local admin account enabled on all systems and rotate the passwords weekly with LAPS. I can’t figure out ho...