Blog Details

 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
Mar 20,  · Google Duo for Windows PC. Download Google Duo for PC free by installing an Android emulator. Install Duo for Windows 7,8,10 & Mac!Estimated Reading Time: 5 mins. Oct 23,  · Google Duo Duo is a one-to-one video calling mobile app for everyone – designed to be simple, reliable and fun so you never miss a moment. Download/5. Download duo Is a on serial data but the loadmaster can be used with any other. Video door available through DVI guaranteed in designed HP Docking Pigeon sold separately supports resolutions up to x at both full and intuitive blanking, and x at incredible blanking. Your message has been included and duo be duo .
 
 

One moment, please.

Explore Our Products Duo provides secure access to any application with a broad range of capabilities. Compare Editions Get the security features your business needs with a variety of plans at several price points. Have questions about our plans? Not sure where to begin?

Get in touch with us. Explore Our Solutions Duo provides secure access for a variety of industries, projects, and companies. Users can log into apps with biometrics, security keys or a mobile device instead of a password. Learn More. Learn About Partnerships Partner with Duo to bring secure access to your customers. Already a SSP Partner? See All Support Have questions?

Our support resources will help you implement Duo, navigate new features, and everything in between. Duo Care is our premium support package. With a dedicated Customer Success team and extended support coverage, we’ll help you make the most of your investment in Duo, long-term.

Browse All Docs Get instructions and information on Duo installation, configuration, integration, maintenance, and much more. We update our documentation with every product release. Sign up to be notified when new release notes are posted.

See All Resources Explore research, strategy, and innovation in the information security industry. Learn how to start your journey to a passwordless future today. Duo integrates with Microsoft Windows client and server operating systems to add two-factor authentication to Remote Desktop and local logons and credentialed UAC elevation prompts.

The 4. We recommend updating any domain controllers with 4. Be sure to read through these instructions before you download and install Duo for Windows Logon. Starting with version 4. Firewall configurations that restrict outbound access to Duo’s service with rules using destination IP addresses or IP address ranges aren’t recommended, since these may change over time to maintain our service’s high availability. Before moving on to the deployment steps, it’s a good idea to familiarize yourself with Duo administration concepts and features like options for applications , available methods for enrolling Duo users , and Duo policy settings and how to apply them.

See all Duo Administrator documentation. Log in to the Duo Admin Panel and navigate to Applications. Click Protect to the far-right to configure the application and get your integration key , secret key , and API hostname.

You’ll need this information to complete your setup. See Protecting Applications for more information about protecting applications in Duo and additional application options.

Download the Duo Authentication for Windows Logon installer package. View checksums for Duo downloads here. If you’d like to enable offline access with Duo MFA you can do that now in the “Offline Access Settings” section of the Duo application page, or return to the Admin Panel later to configure offline access after first verifying logon success with two-factor authentication.

Treat your secret key like a password The security of your Duo application is tied to the security of your secret key skey. Secure it as you would any sensitive credential. Don’t share it with unauthorized individuals or email it to anyone under any circumstances! Add your first user to Duo, either manually or using bulk enrollment.

The username should match your Windows logon name. Install Duo Mobile and add your account to it so you can use Duo Push. If the user logging in to Windows after Duo is installed does not exist in Duo, the user may not be able to log in. To test Duo on your Windows system with a group of pilot users, we suggest setting your application’s New User Policy to “Allow Access” while testing. The pilot users that you’ve enrolled in Duo with an associated 2FA device get prompted to complete Duo authentication, while all other users will be transparently let through.

With these two policy settings in place users who have and who have not enrolled in Duo log in to the Windows system as usual without experiencing Duo. This will prompt all enrolled users to perform Duo 2FA after they type in their usernames and passwords, and prevent users who have not enrolled in Duo from logging in without 2FA.

If you chose to enable offline access on your application, then enrolled users who bypass 2FA due to the effective Authentication Policy would still be prompted to complete offline enrollment.

To avoid confusion, we recommend leaving offline access off until you require users to complete Duo 2FA while online. Run the Duo Authentication for Windows Logon installer with administrative privileges be certain that you are not installing version 4.

If you receive an “Installation stopped” error from the Duo installer please refer to Duo KB article for remediation steps. The installer verifies that your Windows system has connectivity to the Duo service before proceeding.

If you need to use an outbound HTTP proxy in order to contact Duo Security’s service, enable the Configure manual proxy for Duo traffic option and specify the proxy server’s hostname or IP address and port here. Enter your integration key and secret key from the Duo Admin Panel and click Next again.

If you plan to use smart cards on the systems where you install Duo, click to Enable Smart Card Support and select your smart card options:. These options only support the Windows native smart card provider. Available in version 3. If you need to change any of your chosen options after installation, you can do so by updating the registry.

The Duo authentication prompt appears after you successfully submit your Windows credentials. When automatic push is enabled the default option , the Duo prompt indicates that a request has been pushed to your phone.

If automatic push is disabled or if you click the Cancel button on the Duo authentication prompt, you can select a different device from the drop-down at the top if you’ve enrolled more than one or select any available factor to verify your identity to Duo:. Remember: if you find that Duo Authentication for Windows Logon has locked you out of your Windows system e. The application you were trying to launch runs after you approve the Duo two-factor request.

Duo Authentication for Windows Logon v4. Check the box next to Enable offline login and enrollment to turn on offline access. Check the Only allow offline login from users in certain groups to specify a group or groups of Duo users permitted to use offline access.

Users who are not members of the groups you select here won’t be able to enroll in offline access or login in with MFA when the Windows system is unable to contact Duo, and instead are subject to your fail mode configuration let in without MFA if you enabled fail open, or prevented from logging in if you disabled fail open.

After you configure this option, when a user logs into a Windows system while it’s online and can reach Duo and it has been greater than hours since the last online authentication, Duo for Windows Login will update the offline policies for all users on the system, including deprovisioning them for offline access if they are no longer members of the offline groups selected for offline login in the Duo Admin Panel.

If you also configured permitted groups on your RDP application, users need to be members of both the permitted and the offline login groups to use offline access.

Choose from the two options for expiring offline access in the Prevent offline login after setting:. Enter the maximum number of offline logins allowed to users. With this option, there is no expiration date for offline access.

Users may log on to the Duo-protected Windows workstation while offline the number of times you specify here. They’ll need to reconnect their offline computer to the internet upon reaching this limit.

Enter the maximum number of days offline, up to With this option, there is no limit to the number of times a user logs in while offline during the allowed period. Users need to reconnect their offline computer to the internet upon reaching the end of the period you define here. If the user does not perform online Duo authentication before the maximum number of days specified here is reached, they can no longer log in offline , and so must connect to Duo’s service in order to log in at all. Both offline authentication methods are allowed unless you uncheck one in the Offline authentication methods setting.

You may not uncheck both options. Any authentication method enabled for offline access is always permitted, overriding any other policy setting restricting authentication methods for the RDP application. No information about logins using offline access is reported in Duo Admin Panel authentication reports while the Windows system is offline. At the next online authentication, login events that occurred while the system was offline are sent to Duo’s service.

These events show up in the Authentication Log with other user access results, and show the offline authentication method used.

By default, five 5 users may enroll in offline access. To increase or reduce the number of users that may activate offline access on a given Windows client, use the Registry Editor regedit. Once the maximum number of users have activated offline access, the next user receives an error when attempting to enroll in offline access.

To force offline reactivation for a previously activated user on a given Windows system, use the Registry Editor regedit. You may have Windows systems where no users should log in using offline access, regardless of the application setting in the Duo Admin Panel.

To prevent offline authentication for any user on a given Windows client, use the Registry Editor regedit. You can also reactivate offline access from the online Duo prompt. Note that only one authentication device — a single phone with Duo Mobile or a single security key — may be activated for offline login. Activating a second device via the reactivation process deactivates the first. You can upgrade your Duo installation over the existing version; there’s no need to uninstall first.

The installer maintains your existing application information and configuration options. Download the most recent Duo Authentication for Windows Logon installer package.

Run the installer with administrator privileges and follow the on-screen prompts to complete the upgrade installation. If you’re upgrading to a version that includes new installer options, the configuration screen for those options won’t be shown during an upgrade install.

You’ll need to configure those new options via Regedit or GPO update. Troubleshooting Need some help? For further assistance, contact Support.