Windows Logon - No Internet Connection
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
03-27-2018 09:13 PM
Hello,
I was wondering if there is any update on using Duo for Windows without an internet connection?
2FA failing to work without an internet connection is a major weakness and defeats one of the major reasons to use the product.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
03-28-2018 10:45 AM
Can you please explain in more detail the scenario you are referring to, so that I may be able to offer assistance.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
04-02-2018 11:39 AM
Presently, if a laptop is taken to a remote location, say an airport that its never been to, when the user powers on the machine, it doesn’t have internet access. The only options presently available in the Duo for Windows application is to “FailOpen,” which means 2FA is not used at all, or “FailClosed,” making the laptop not usable.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
04-02-2018 12:14 PM
Ahh I see, currently we are not using DUO for windows, just all remote access… I wonder if SMS codes would work for your users?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
04-02-2018 01:03 PM
SMS codes don’t apparently work from the logon screen.

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
04-12-2018 05:32 AM
Unfortunately at this time the only options for your use case are to “Fail Open” when no network is available or if you use Smart Cards to provide MFA outside of Duo. I know there is a feature request being worked for this scenario,

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
04-12-2018 07:01 AM
Hi jmiller,
SMS codes absolutely work with Duo for Windows Logon. Click the “Enter a Passcode” button and you can then type in a passcode you already received via SMS or request new codes.
You are correct that our binary fail open/closed behavior doesn’t account for offline MFA. We will have some news about this in the near future, but in the interim if you allow your users to configure networks from the login screen you should enable fail closed.
When your users are away from their normal location they can use the Networks UI from the icon in the bottom right to connect to an available network, allowing them to complete Duo MFA at login.

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
04-17-2018 12:14 PM
Hi Kristina,
I think the SMS was related to being while offline. I hadn’t thought about allowing users to configure networks prior to login unfortunately our users are often in locations without any internet connectivity.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
04-18-2018 09:42 AM
SMS + offline laptop does not work. The laptop has to be online.
I don’t believe you can log into a network from the Windows logon screen that requires a portal login, like at a hotel or airport, since you can’t bring up a browser window while on the logon screen.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
05-15-2018 05:02 AM
Hello, we have also run into this problem. We’d like to use DUO for MFA for local logons but it really needs to have a fallback option when it fails closed.
is there any update on that feature request?
Thank you

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
05-15-2018 05:16 PM
Hi Mark,
We don’t usually comment on features still in development, but we are hard at work on a solution for temporary offline access. I think you’ll be pleased to hear that we’ll have a solution next quarter.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-24-2018 03:47 AM
Hi Dooley,
any news on the offline authenticaiton? Is July still the target?
KJ

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-25-2018 06:34 AM
I can’t comment on a specific month at this time, but development is very much underway and this is still a feature we’re hoping to release in the next quarter time-frame.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-22-2018 09:43 AM
Hi
Is there any update to this yet? I know of a lot of users who are crying out for this!
Thanks

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
08-03-2018 03:11 PM
It’s August now. Is this feature working yet? Thanks.
