Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

It is possible to use The Computer Logon to protect Network drive mapping solution can be configured to secure access to mapped network drives with multi-factor authentication. ...See below:


This guide assumes that logon to the end user's computer is already protected by the Computer Logon Client.The

first step required is a modification to the Computer Logon registry key on the client computer, to control the behavior of the network drive mapping (NDM)

Open regedit and go to  Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Deepnet Security

Create a new sub-key called Computer Logon

Image Removed

Within the new key, add a DWORD value called MFAforNDM with the value of 1;

Image Removed

This change can be deployed through GPO: https://www.techcrafters.com/portal/en/kb/articles/how-to-add-edit-deploy-and-import-registry-keys-through-gpo#How_to_Add_Edit_a_Registry_Key_via_Group_Policy_Objects

The second step required is to access the to the DualShield Administration Console and modify the Computer Logon Client policy:

Navigate to Shortcuts>Check Policies and search for the Compter Logon Client Policies.

Image Added

Edit the policy.

Expand the For Customers using DualShield version 7.1.0 (0702) or above, plus Computer Logon Agent and Client version 2.5.6  or above, please expand the NAC tab and set Authentication to Multi-Factor Authentication..

For Customers using slightly older versions of DualShield and the Computer Logon Agent and Client, Expand the UAC tab and set Authentication to Multi-Factor Authentication..

Image Removed

Click Save

Sign out and then sign back in to the client machine, so that the new policy is picked upYou will most likely need to restart the client PC for this change to take effect.