none
2 Factor Authentication RRS feed

  • Question

  • Hi all,

    I need to enable two-factor authentication on a laptop running Windows 10 professional. The laptop will not be connected any other computers. Is there a way to configure the login to require a fingerprint AND a password? If not, is there a way to require a smartcard AND pin? Are there any good resources that describe how to set up 2 factor authentication for either of these two configurations.

    I've started exploring this topic but I haven't seen any resources that describe how to do this if the system is not connected to some sort of Windows domain controller. 

    Thank you.

    Saturday, October 14, 2017 10:50 PM

Answers

All replies

  • Hi,

    Based on my check, you can setup Windows 10 to log you on with a PIN, thumbprint, iris or facial
    recognition. All of these are done through the Settings app. None of these,
    by themselves enable the device as a second factor of authentication.

    If that is what you truly want to do, then you need to implement Microsoft
    Passport and this can only be done with a computer that is joined to either
    a Windows domain or to an Azure AD domain.

    https://technet.microsoft.com/en-us/library/mt219734%28v=vs.85%29.aspx?f=255&MSPPError=-2147217396

    Hope it will be helpful to you


    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Tuesday, October 17, 2017 1:14 AM
    Moderator
  • Haven't received your message a few days, was your issue resolved? 
    I am proposing previous helpful replies as "Answered". Please feel free to try it and let me know the result. If the reply is helpful, please remember to mark it as answer which can help other community members who have same questions and find the helpful reply quickly.
    Best regards,
    Carl 

    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Sunday, October 22, 2017 1:05 PM
    Moderator
  • Thanks, this answered my question. We’ll go forward using a smart card and pin authentication method since biometrics aren’t supported for a stand-alone configuration.
    Sunday, October 22, 2017 2:16 PM