Duo authentication on windows login

[mrcmb]

I’m setting up duo for RDP. I would like to disable it when I log into my machine while i’m at my desk is that possible? I would like it to authenticate when I remote into it. Currently if I lock my workstation it makes me authenticate again.

ryan

[jdiaz_pratt · Accepted solution]

When you install Duo Authentication for Windows Logon, you can select the option “Only prompt for Duo authentication when logging in via RDP”.

You can also make the change in the registry:
Location: HKLM\SOFTWARE\Duo Security\DuoCredProv
Registry Value: RdpOnly
Type: DWORD
Set to 0 to protect both RDP and local console logons or 1 to protect RDP logons only.

You can check out this document for more info: Duo Authentication for Windows Logon and RDP: FAQ | Duo Security