Secure Access

The following settings can be configured from the Secure Access section.

Manage MFA for Windows Clients GPOs

You can tag the GPOs you want to use with Secure Access. Affected users will authenticate with a second factor when logging in to their Windows account.

1. Click Secure Access.
2. In the GPOs tagged for MFA for Windows Clients section, click Tag GPOs.
3. In the dialog that opens, select the Group Policy Object and click OK.

Manage MFA for Remote Access GPOs

You can tag the GPOs you want to use with the NPS Companion (RADIUS) feature in Secure Access. Affected users will authenticate with a second factor when logging in to their Windows account using remote access. For more information, see Secure Access for Remote Access.

1. Click Secure Access.
2. In the GPOs tagged for MFA for Remote Access section, click Tag GPOs.
3. In the dialog that opens, select the Group Policy Object and click OK.

Manage MFA Bypass GPOs

You can tag GPOs to let affected users bypass MFA for Windows Clients and Remote Access. These users are not prompted for MFA when signing in to computers with the Specops Client installed or to resources protected by the Specops NPS Companion.

Configure a GPO to apply to the security group whose users should bypass MFA, then tag it using the following steps:

1. Click Secure Access.
2. In the GPOs tagged for MFA Bypass section, click Tag GPOs.
3. In the dialog that opens, select the Group Policy Object and click OK.