2FA for Windows login using Mobile app

Hi All,
We are planning to implement additional login security for our domain.
Present :
Windows Server 2012 R2
Active Directory
800+ users
Requirement : need to enable additional security (means 2FA) for all users to login to AD and other applications (like Billing, Accounts, etc - Third Party Apps).
We recommend to use a mobile app to general passcode for 2FA.
Please advice the best industry standard method and OS/Application requirements.
Thanks in advance
Shibu

Some Microsoft solutions provide 2FA like Microsoft Azure.
For Windows logon or your applications 2FA, you will need to use third party solutions for 2FA.
For Windows logon, this is an example of third party solutions you can use: http://2fa.com/2fa-one/
For your applications, you need to check with their developers if they support 2FA and what are the supported integration products.
This posting is provided AS IS with no warranties or guarantees , and confers no rights.
Ahmed MALEK
My Website Link
My Linkedin Profile
My MVP Profile

Similar Messages

Office prompts for windows login, when i'm trying to save edited document

Hello, i'm trying to disable webdav in office 2010.
My setup is: Apache 2.2.4 with Kerberos "mod_auth_kerb" enabled, works fine.
So fare i have this config:
.htaccess:
RewriteCond %{REQUEST_METHOD} ^(OPTIONS|PROPFIND|HEAD)$ [NC]
RewriteCond %{HTTP_USER_AGENT} ^Microsoft\ Office\ Core\ Storage\ Infrastructure.*$ [OR]
RewriteCond %{HTTP_USER_AGENT} ^Microsoft\ Office\ Protocol\ Discovery [OR]
RewriteCond %{HTTP_USER_AGENT} ^Microsoft\ Office\ Existence\ Discovery [OR]
RewriteCond %{HTTP_USER_AGENT} ^Microsoft\-WebDAV\-MiniRedir.*$
RewriteRule .* - [R=501,L]
This config, disables the login, which came everytime i opened the document in Internet Explorer.
But when document is opened and i want to save the document, i get a windows login prompt.
This is my access log, which shows office tries to access the webserver, but anonymously.
10.0.0.123 - - [22/Jan/2014:15:21:18 +0100] "OPTIONS /files/tool/ HTTP/1.1" 401 762 "-" "Microsoft Office Protocol Discovery"
10.0.0.123 - [email protected] [22/Jan/2014:15:21:18 +0100] "OPTIONS /files/tool/ HTTP/1.1" 501 776 "-" "Microsoft Office Protocol Discovery"
10.0.0.123 - [email protected] [22/Jan/2014:15:21:18 +0100] "OPTIONS /files/tool/ HTTP/1.1" 501 776 "-" "Microsoft Office Protocol Discovery"
10.0.0.123 - [email protected] [22/Jan/2014:15:21:18 +0100] "OPTIONS /files/tool/ HTTP/1.1" 501 776 "-" "Microsoft Office Protocol Discovery"
10.0.0.123 - - [22/Jan/2014:15:21:18 +0100] "HEAD /files/file.doc HTTP/1.1" 401 272 "-" "Microsoft Office Existence Discovery"
10.0.0.123 - [email protected] [22/Jan/2014:15:21:18 +0100] "HEAD /files/file.doc HTTP/1.1" 501 447 "-" "Microsoft Office Existence Discovery"
10.0.0.123 - [email protected] [22/Jan/2014:15:21:18 +0100] "GET /files/file.doc HTTP/1.1" 304 456 "-" "Microsoft Office Core Storage Infrastructure/1.0"
10.0.0.123 - [email protected] [22/Jan/2014:15:21:18 +0100] "PROPFIND /files/file.doc HTTP/1.1" 501 807 "-" "Microsoft Office Core Storage Infrastructure/1.0"
10.0.0.123 - - [22/Jan/2014:15:21:24 +0100] "OPTIONS /files/ HTTP/1.1" 401 762 "-" "Microsoft Office Protocol Discovery"
10.0.0.123 - [email protected] [22/Jan/2014:15:21:24 +0100] "OPTIONS /files/ HTTP/1.1" 501 771 "-" "Microsoft Office Protocol Discovery"
10.0.0.123 - - [22/Jan/2014:15:21:24 +0100] "OPTIONS / HTTP/1.1" 401 762 "-" "Microsoft-WebDAV-MiniRedir/6.1.7601"
10.0.0.123 - - [22/Jan/2014:15:21:24 +0100] "OPTIONS / HTTP/1.1" 401 761 "-" "Microsoft-WebDAV-MiniRedir/6.1.7601"
10.0.0.123 - - [22/Jan/2014:15:21:24 +0100] "OPTIONS / HTTP/1.1" 401 761 "-" "Microsoft-WebDAV-MiniRedir/6.1.7601"
10.0.0.123 - - [22/Jan/2014:15:21:24 +0100] "OPTIONS / HTTP/1.1" 401 761 "-" "Microsoft-WebDAV-MiniRedir/6.1.7601"
10.0.0.123 - - [22/Jan/2014:15:21:24 +0100] "OPTIONS / HTTP/1.1" 401 761 "-" "Microsoft-WebDAV-MiniRedir/6.1.7601"
10.0.0.123 - - [22/Jan/2014:15:21:24 +0100] "OPTIONS / HTTP/1.1" 401 761 "-" "Microsoft-WebDAV-MiniRedir/6.1.7601"
10.0.0.123 - - [22/Jan/2014:15:21:24 +0100] "OPTIONS / HTTP/1.1" 401 761 "-" "Microsoft-WebDAV-MiniRedir/6.1.7601"
10.0.0.123 - - [22/Jan/2014:15:21:24 +0100] "OPTIONS / HTTP/1.1" 401 761 "-" "Microsoft-WebDAV-MiniRedir/6.1.7601"
10.0.0.123 - - [22/Jan/2014:15:21:24 +0100] "OPTIONS / HTTP/1.1" 401 761 "-" "Microsoft-WebDAV-MiniRedir/6.1.7601"
10.0.0.123 - - [22/Jan/2014:15:21:24 +0100] "OPTIONS / HTTP/1.1" 401 761 "-" "Microsoft-WebDAV-MiniRedir/6.1.7601"
10.0.0.123 - - [22/Jan/2014:15:21:24 +0100] "OPTIONS / HTTP/1.1" 401 761 "-" "Microsoft-WebDAV-MiniRedir/6.1.7601"
10.0.0.123 - - [22/Jan/2014:15:21:24 +0100] "OPTIONS / HTTP/1.1" 401 761 "-" "Microsoft-WebDAV-MiniRedir/6.1.7601"
10.0.0.123 - - [22/Jan/2014:15:21:24 +0100] "OPTIONS / HTTP/1.1" 401 761 "-" "Microsoft-WebDAV-MiniRedir/6.1.7601"
10.0.0.123 - - [22/Jan/2014:15:21:24 +0100] "OPTIONS / HTTP/1.1" 401 761 "-" "Microsoft-WebDAV-MiniRedir/6.1.7601"
10.0.0.123 - - [22/Jan/2014:15:21:24 +0100] "OPTIONS / HTTP/1.1" 401 761 "-" "Microsoft-WebDAV-MiniRedir/6.1.7601"
10.0.0.123 - - [22/Jan/2014:15:21:24 +0100] "OPTIONS / HTTP/1.1" 401 761 "-" "Microsoft-WebDAV-MiniRedir/6.1.7601"
10.0.0.123 - - [22/Jan/2014:15:21:24 +0100] "OPTIONS / HTTP/1.1" 401 761 "-" "Microsoft-WebDAV-MiniRedir/6.1.7601"
I have tried this "fix it tool": http://support.microsoft.com/kb/2123563
What am i missing?
And why is office talking to the server anonymously ?
Jakob Olsen

Hello,
in addition to my question here: http://social.technet.microsoft.com/Forums/office/en-US/eb068660-5ded-411e-bfc1-6f18ba7bc585/office-prompts-for-windows-login-when-im-trying-to-save-edited-document?forum=officeitproprevious
Can someone tell my, how does the Microsoft Office Single Sign on work ?
From what i understand, ms office opens the document (when through IE) and tries to create a webdav connection.
I have tried to disable the webdav on apache.
But the entire webserver is mod_auth_kerb "protected".
And in the access-log, i can see this:
IP, DATETIME, [email protected] document....
But also: IP, DATETIME - document <--- None authenticated user... Why does microsoft not use the current user?
I have tried to ssl enable the website, which i read in this thread: http://support.microsoft.com/kb/2123563
But Microsoft Office stills act as anonymous user.
Jakob Olsen

Bought photoshop elements 11 last year for windows and using it in my desktop. The desktop is crashed now and not usable. So I bought iMac now. Is it possible to trade over or change the licence into iMac version for a small fee. If not , can I partition

bought photoshop elements 11 last year for windows and using it in my desktop. The desktop is crashed now and not usable. So I bought iMac now. Is it possible to trade over or change the licence into iMac version for a small fee. If not , can I partition the hard drive of iMac and install windows and also photoshop elements? which is the best alternative ? why?

A Photoshop Elements license is good for both Mac and Windows so it should be just a matter of downloading the Mac version and using your current serial number to activate it.
PSE 10, 11 - http://helpx.adobe.com/photoshop-elements/kb/photoshop-elements-10-11-downloads.html
If you have any problem with the activation contact Adobe support using chat... Start Here If after selecting relevant responses you are unable to find a solution, choose "Still need help? Contact us." and the chat contact option.

Layers while using mobile app?

If a pdf has layers is it possible to view and select/deselect them while using the mobile app?

Hi,
Currently, it is not possible to turn on or off each layer in the Adobe Reader mobile apps (for iOS, Android, Windows Phone). I am not aware of any other third-party mobile apps that support layers in PDF documents.
I'd recommend using the desktop version of Adobe Reader on a Mac or Windows computer to view PDF documents with layers. Sorry for the inconvenience.

Create a signature capture for Windows Phone 8.1 App

I am creating a Windows Phone 8.1 app with signature capture control on one of my page. I am looking for an approach using C# so that I can draw points on a XAML with Canvas control. But it seems like that InkPresenter name space is removed from Windows
Phone 8.1. Is there anyway I can get it around?
Thanks,

Hi edwlin,
Please try the suggestion provided by Rob Caplan in this thread:
https://social.msdn.microsoft.com/Forums/windowsapps/en-US/2a428bef-d7a3-423b-a288-4c4b4efa8034/capture-digital-signature-in-windows-phone-blank-app?forum=wpdevelop
Quote:
You can capture the signature by listening to pointer messages and storing the points as they come through. You can then render them as Path segments.
See Quickstart: Pointers
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey.

Jabber for Windows login to the IM&P but not to the CUCM

Hi,
I have Jabber for Windows, IM and Presence Server 10.5 and CUCM 10.5. The problem is it says it cannot communicate with the server upon logging in. But if I typed a wrong username / password it says "Your username and password is not correct."
When I try to login to the IM&P it seems okay (even though without phone services). When I try to login to the CUCM it shows some problem.
I've create CSFMGUIDO device with password 12345. When I logon to the CUCM with the following credentials: mguido - 12345 it says "Unable to communicate with the server". When I logon to the CUCM with the following credentials: mguido - 00000 it says "Username and password is not correct".
I'm not using neither LDAP nor DNS. With Android Jabber all it's working correctly.
Has anyone experienced this?
Hope someone can help.
Thank you.

J4W does rely very heavily on DNS, you should at least all required entries to hosts and lmhosts.
How are your servers defined under system -> server??
Are you able to log into UCMuser page??
Have you properly configured all user/device/line association, and created the necessary service profiles???

Jabber for Windows Login failed with - "Must change at Next Login" for CUCM Authentication

Jabber for Windows users cannot login when "User Must Change at Next Login" is selected in the CUCM credential Policy
I found this Bug-ID: CSCuh84476
https://tools.cisco.com/bugsearch/bug/CSCuh84476
We use Jabber for Windows 9.7.4!
I just want to know if there are other users have the same problem and which workaround they applied.
I’m currently testing a User with different Policy credentials (Credentials expire after 1 day).
I think this will also lead to a “username or password wrong”-popup but tomorrow I will see it myself ;)
The planed workaround for us will be to set the “User Must Change at Next Login ” option and the users first have to login at UCM-Userpage to change their initial password.
BTW: Maybe somebody from Cisco know when this get fixed?
Best regards
Franz

J4W does rely very heavily on DNS, you should at least all required entries to hosts and lmhosts.
How are your servers defined under system -> server??
Are you able to log into UCMuser page??
Have you properly configured all user/device/line association, and created the necessary service profiles???

Fingerprint Reader not working upon waking from sleep for windows login

Hello,
I have a brand new T540P with a Validity fingerprint reader.
Rougly 80% of the time, the Fingerprint reader is unresponsive at the windows login screen after waking the computer from sleep. It works 100% of the time when booting from an off position, however. Once logged in, it also works 100% of the time. The issue only arises when logging into windows.
Things I have tried
-uninstalling/installing device in device manager and finger print manager pro software
-setting fingerprints through both fingerprint manager pro software (lenovo) OR through the built in windows fingerprint control panel options
-disabling "allow windows to turn off this device to save power" in device manager.
I should note as well that I have another T540P that I ordered as a replacement. Both models experience the same issue.
Is this a platform wide issue affecting all T540P models? This is frusterating.
Solved!
Go to Solution.

sailoholic
Your report is the first we have ever heard of this issue on T/W. It does not happen on my T/W systems here (with or without 30 Day Standby enabled). The other reports I heard of this problem came from X240.
I just want to confirm with you - the problem happens after coming out of Sleep (and not Hibernate), right?
Can you tell me exactly what you are doing? e.g.
1. Use the computer normally (is AC attached or not?)
2. Close the lid - the computer goes to sleep (or do you go to sleep some other way?)
3. Open the lid 2 hours later (or how long)?
4. are you using a dock?
The more info you can provide, the better. Thanks for your help.
Also please let me know what BIOS version you have.

HP 7510 won't scan from ADF when using mobile app on iPhone or iPad

Hi,
I have an issue where the mobile app will happily kick off the scan process and the printer looks and sounds like all is fine. But when the scanning is completed, the app says 'there was an error during scanning' and it does not save the scan. This only happens when using the ADF, not when scanning via the scanner glass - it's all fine doing it that way.
I'm running v4.3 of the all in one app which was released in the last week or so. Not sure if it a bug with the app that's causing the issue..
Anyone seen similar issues and resolved?
Cheers,
Simon.

Hello @sjholcroft,
Welcome to the HP forums.
I understand that the All-in-One Printer Remote app is not working properly since the last update.
I would like to help.
Nothing has been stated by HP about this issue.
If there is a possible issue, HP would like to know.
Please call our Cloud Services at 855-785-2777.
If you live outside the US/Canada Region, please click the link below to get the support number for your region. http://www8.hp.com/us/en/contact-hp/ww-phone-assist.html
Hours:
Mon-Fri. 8am - 11pm, Sat. 9am-8pm - EST
Mon-Fri. 7am - 10pm, Sat. 8am-7pm - CST
Mon-Fri. 6am - 9pm, Sat. 7am-6pm - MST
Mon-Fri. 5am - 8pm, Sat. 6am-5pm - PST
Aardvark1
I work on behalf of HP
Please click “Accept as Solution ” if you feel my post solved your issue, it will help others find the solution.
Click the “Kudos Thumbs Up" on the right to say “Thanks” for helping!

Fully Licensed CC package asking for CC login when launching apps

We are a tertiary educational institute with an Adobe CC for Enterprise license.
In our Macintosh environment I am able to download and package a licensed suite of CC applications using the Creative Cloud Packager.
I then add this package to our deployment/imaging software (JAMF Software's Casper Suite).
When I then deploy that package I sometimes will have applications asking for Adobe ID login when they are launched. I have also had instances of successfully deployed applications asking for Adobe ID login weeks after being used successfully. I am able to deploy the same package successfully to different machines that are spec'd the same.
I have even had the instance where I imaged a machine and the applications asked for Adobe ID login, so I then re-imaged the machine with the exact same image and the 2nd time the applications launched successfully.
To my mind, this indicates the licensing being 'broken' in some way. I might add that this also occurs within our Windows environment using SCCM to deploy the package.
Is anybody able to point me in the right direction as to where I should be looking (within the Mac system) for the particular license file that may or may not be getting corrupted/blocked? I have had a look at the APTEE tool, but have not had any success with using it to repair the license.

Hi AlanSmithCPIT,
Please refer the article: http://helpx.adobe.com/creative-cloud/packager/provisioning-toolkit-enterprise.html.
How to get APTEE:
1. Download and install Creative cloud packager.
2. Navigate to Library/Application Support/Adobe/OOBE/PDapp/CCP/Utilities/APTEE/adobe_prtk.
Regards,
Romit Sinha

Make clickable UI-elements for windows Phone 8.1 apps maps

Windows Phone 8.1 App , C#
I would like to let the user add Pushpins ( which apparently are called MapIcons ) to the map and when the user clicks the newly created Pushpin some other ui-elements should appear.
But apparently MapIcons are not clickable and you can not inherit from them since they are sealed, so no luck in making them clickable.
I tried to just extend from Windows.UI.Xaml.Controls.Button , but those have not Location, probably because the do not belong to the Windows.UI.Xaml.Controls.Maps-namespace. So I can not really add them to the Windows.UI.Xaml.Controls.Maps.MapControl.Children
or Windows.UI.Xaml.Controls.Maps.MapControl.MapElements, since they will not be on the map where I would want them to be.
So how do you make a clickable ui-element that I can give a location on the map?
I already was here
https://msdn.microsoft.com/en-us/library/windows/apps/xaml/dn792121.aspx#showing_xaml_controls_and_shapes_on_the_map
But I don't see how I can add clickable elements to my map
I could write something like this of course
        <Maps:MapControl Grid.Row="1"
            x:Name="map"
            MapServiceToken="token"
            >
            <Maps:MapIcon>
            </Maps:MapIcon>
        </Maps:MapControl>
But this MapIcon again is not clickable and it also staticly coded. I want to add mine dynamic.

Hi Michael,
Yes, as you said the MapIcon is not clickable, then for the workaround, please try to check the reply which posted by @Jogy in here:
http://stackoverflow.com/questions/25377526/windows-phone-8-1-mapicon-click-event .
Rest Regards,
Amy Peng
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey.

How large should i make my bootcamp partition for Windows to use basic autodesk programs like Revit and Autocad?

I dont think ill be using windows for much more than revit and autocad (i use autocad on the mac side, but just in case), but i want to make sure I am not going to have a problem in the future.
I am a grad student in interior design, and have access to a windows computer (if i absolutely need it).
I will be basically just using those two programs, but of course other things will probably eventually get installed also.
Does anyone who uses bootcamp for those programs have any input as to how much space i should set aside, without giving way too much space to Windows? Windows itself seems to take up a lot of space anyway... looks like 24Gigs just for windows! ugh.
I prefer to use the mac side, so id like to keep as much free space on that end of the spectrum as possible, but it seems like a hassle to change the partition, and id like to avoid it if at all possible. (dont want to pay for any re-partitioning programs either. School has bled me dry already.
I have a macbok pro 13-inch (mid 2012).
Thanks everyone, i appreciate any guidance.

I have a 1TB drive in my iMac and set aside 160GB for the Win7/64 partition, and I'm not running anything as demanding as CAD programs. I've not used AutoCad personally but the drafters I worked with did, and always got the the fastest computers with the biggest hard drives. A development engineer was always overjoyed to get a computer the drafters cast off!
I'm not sure "too much" is the problem. I'm concerned about too little. I think with a 750GB drive that 200-250 might be more realistic fpr a CAD program. It all depends on how much swap file activity the programs use.
If someone with AutoCad experience doesn't show up here, it may be time to search the AutoDesk web site and forums to see what people consider the smallest HD usable assuming you are off-loading completed projects to external storage.
While on the AC support site or forums, also find out if the Intel HD 4000 integrated graphics in your MBP is considered workable video hardware. It's not as powerful as the hardware in other MBP models and desktop Macs.
RAM: A few months after installing Win7/64 in my iMAc quad-core i7, I found a great buy on RAM and trebled my RAM from 4 to 12GB. I did not see a big difference in the Mac side but noticed better performance on the Win side including better scores on MS's performance scoring system. You may need to add RAM if you have the stock 4GB.

Recommended browsers for Windows 2K using EBS

Hi.
Note 285218.1 gives information on the minimum requirements Oracle asks for in order to certify the Internet Explorer 7 browser for use with EBS. There is clear informationon the requirements if users have Windows Vista, or XP.
There is no such informationin that document for users on Windows 2000. I will raise an SR for this but wanted to check if anyone knows of a Metalink doc that explains this.
Thanks!
DA

What release of EBS are you deploying?
The following notes references Windows 2000, but the requirements are much lower than you will want to have.
Oracle Applications Release Notes, Release 11i (11.5.10.2)
https://metalink2.oracle.com/metalink/plsql/ml2_documents.showDocument?p_database_id=NOT&p_id=316803.1
Oracle Applications Release Notes, Release 12.1.1
https://metalink2.oracle.com/metalink/plsql/ml2_documents.showDocument?p_database_id=NOT&p_id=798258.1
I would consider 512 MB to 1 GB the absolute minimum unless the clients will not be running Outlook, Anti-Virus, or any other software concurrently with EBS browser sessions. If you plan to use busy forms like the Planner Workbench, they will need 200-300 MB of memory or the form will not open.
Mainstream support for Windows 2000 ended in 2005, so it would be a good idea to deploy a supported client desktop configuration.
http://en.wikipedia.org/wiki/Windows_2000

Multitouch drivers for Windows 8 using Bootcamp?

Macbook Pro
Retina, 15-inch, Late 2013
Processor 2.3 GHz Intel Core i7
Memory 16 GB 1600 MHz DDR3
Graphics Intel Iris Pro 1024 MB
Is there any drivers that will enable multitouch on Windows 8 using bootcamp? The problem I often run into occurs when I attemp to click with one finger and move a file with another finger. On OSX this works flawlessly making it so simple to move around files.

Did you download and install the Windows Support software in accordance with the Boot Camp instructions? If so, you have a Boot Camp Control Panel icon ion your Windows task bar. Open the control panel and set your trackpad options how you want them configured.

Need help with two-factor auth for windows logon using CSS

Hi all,
I have been trying for a couple of days now to get two-factor auth for windows logon working on my X1C Type 3443.
I am running Windows 7 (64-bit) with Lenovo System Update 5.06.0007, Lenovo Solution Center 2.6.001.00, ThinkVantage Fingerprint Software 5.9.9.7282, ThinkVantage Client Security Solution 8.30.0031.00. If it's of any importance, my X1C was originally shipped with Windows 8, but I couldn't stand it and reinstalled Windows 7 instead.
I have uninstalled and reinstalled the above programs in the following order:
1) Install System Update and reboot
2) Install Solution Center and reboot
3) Install CSS and reboot
4) Install Fingerprint Software and reboot
Everything seems to be working fine by itself, except that when I try to configure two-factor auth in CSS, the Fingerprint tab (on the left of the GUI) is greyed out and CSS tells me that I have no fingerprints enrolled. The Fingerprint Software, however, is working just fine and shows me as having a fingerprint enrolled there.
I have spent all morning searching for a solution, but everything I find dates back to 2011, when ThinkPads still came with ThinkVantage Toolbox. I obviously can't download that anymore, so I'm at a loss. Can someone please help? Thanks!
Candace

Hi all,
I have been trying for a couple of days now to get two-factor auth for windows logon working on my X1C Type 3443.
I am running Windows 7 (64-bit) with Lenovo System Update 5.06.0007, Lenovo Solution Center 2.6.001.00, ThinkVantage Fingerprint Software 5.9.9.7282, ThinkVantage Client Security Solution 8.30.0031.00. If it's of any importance, my X1C was originally shipped with Windows 8, but I couldn't stand it and reinstalled Windows 7 instead.
I have uninstalled and reinstalled the above programs in the following order:
1) Install System Update and reboot
2) Install Solution Center and reboot
3) Install CSS and reboot
4) Install Fingerprint Software and reboot
Everything seems to be working fine by itself, except that when I try to configure two-factor auth in CSS, the Fingerprint tab (on the left of the GUI) is greyed out and CSS tells me that I have no fingerprints enrolled. The Fingerprint Software, however, is working just fine and shows me as having a fingerprint enrolled there.
I have spent all morning searching for a solution, but everything I find dates back to 2011, when ThinkPads still came with ThinkVantage Toolbox. I obviously can't download that anymore, so I'm at a loss. Can someone please help? Thanks!
Candace

2FA for Windows login using Mobile app

Similar Messages

Maybe you are looking for