Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Good Afternoon,I am in the process of rolling out MFA for all in our organization. We've been using it admin only for over a year. I have Directory sync all set up but I'm running into some issues with the process.If I sync users and set them to "Act...
Kristina,You're awesome, thank you! I have created two Duo (and AD) Groups now: Duo Users and Duo Pilot Users. I realized that regular Duo users already enrolled and Admins already enrolled should be able to use 2FA while I'm enrolling new people. I ...
May I ask which GPO I would use to enforce 2FA on admins? I can see the idea of putting admins in a separate OU so they sync with Duo in their own group but I'm unaware of a GPO to force 2FA. Do you mean an additional Duo policy?
Kristina,Thank you for the reply. You're correct, it is Windows Logon. Everything you say sounds good. We can certainly disable authentication for a short time while enrolling users.Scott