Adding Multi-Factor Authentication to Windows Logon

One key area of security that can often be overlooked is the authentication to the laptop or the server itself. Protecting these corporate assets is an urgent issue, cautions SecurEnvoy's Michael Urgero

Look at how far we've come over the years. The introduction and mainstream use of virtualisation in the data centre, cloud and the 'work from anywhere' has sparked some amazing opportunities, from the rapid development of business ideas to remotely supporting critical systems and customers. Not all that long ago, we were a much more analogue group, much more manual and hands-on in our methods.

Coming with the high-speed rush of new technologies that are fully intended to make lives easier, there are also new security threats to care for and consider. We've gone to great lengths to ensure that our employees have easy and secure access to the business, and that our system operators can keep those systems running. Have we done enough? How will we know? These are some of the things on the minds of IT execs, as they lay awake into the night.


WHERE THE ACTION IS
One of the parts that's often missed is the authentication to the laptop or the server itself. The desktop interface of these devices is where all the action is and it should be just as secure. New virtualised, cloud and hybrid solutions make accessing these devices almost an entirely remote affair. Apart from accessing your laptop directly, everything else you do in a day is pretty much done on systems elsewhere.

One could argue that Microsoft simply doesn't do enough with its traditional username and password and, what's more; Windows Hello is difficult to deploy, manage and has its own share of issues; ask any help desk administrator and you'll get an ear full.

URGENT CHALLENGE
Securing these corporate assets is an urgent issue and our customers know that. Our solution comes complete with our integrated SecurEnvoy Windows Logon Agent. Our solution installs directly on the laptop or server and protects the Windows Logon process with true multi-factor authenti- cation. By doing this, verification of the username and password is challenged and verified with the trust of multi-factor authentication quickly and easily.

Michael Urgero, SecurEnvoy: his company's solution protects the Windows Logon process with true multi-factor authentication.
Some of our customers have deployed our SecurEnvoy Windows Logon Agent to all corporate end-point devices, as well as all servers in the data centre, both physical and virtual to assure the identity of employees as they authenticate.

PROMPT ACTION!
The initial prompt is the same as it always has been, asking for a username and password. You are immediately prompted for the multi-factor token, which is available in a variety of methods. Everything from push notifications to a mobile device, SMS messaging, physical tokens or manual entry to name just a few.

The same agent would be loaded on both Windows 7/10 devices and Windows Servers as well from Microsoft Windows Server 2008 forward. This software can be distributed using any of the common methods, from Active Directory to third party deployment tools and, best of all, works when devices are completely off-line.

For more details, and to get a demo and talk about our solutions, feel free to give us a call. Be sure. Be Confident. SecurEnvoy.