This may or may not fit.   GCPW
<https://support.google.com/a/users/answer/9250915?hl=en>, might work in
this case.   I am using it to slowly eliminate reliance on AD, but looking
through the documentation it might work with AD.   It basically replaces
the Windows AD login with a Google one.   The advantage here is that every
google account that has 2factor turned on will need 2factor to log into the
windows device too.


[image: image.png]

On Fri, Apr 5, 2024 at 11:11 AM Robert Wickberg <[log in to unmask]>
wrote:

> We got a "friendly reminder" from VSBIT that they would like us to be
> using 2FA for active directory for privileged accounts, which in our case
> is really only the administrator account.   For those of you that have
> implemented 2FA for AD, what did you use to do it, and, if you don't mind,
> what did it cost?
> -----
>
> Robert Wickberg
> Technology Coordinator, BAMS, BUHS, and WRCC
> 802-451-3418
>
> -----------------------------------------------------------------------
>
> Search <http://list.uvm.edu/archives/school-it.html> the SCHOOL-IT Archive
>
> Manage <http://list.uvm.edu/cgi-bin/wa?SUBED1=SCHOOL-IT&A=1> your
> Subscription to SCHOOL-IT
>


-- 
*Bjorn Behrendt M.Ed*
MRUUSD: Director of Technology, Data, and Innovation
802.786.3998 x 296
Schedule a time to meet <https://calendly.com/bbehrendt/officehours>

*"Thank you & Never Stop Learning" *
* <https://calendly.com/bbehrendt/office-hours>*