"Additional LSA Protection" support
Microsoft has added a new optional feature called Additional LSA Protection.
AuthLite only supports this feature in version 2.4.10 and later, and the AuthLite Kernel Driver component must be installed.
CLOSE
AuthLite Interactive Documentation
Quick Start: Install and protect Domain Admins
AuthLite Features
Supported Tokens
Installation and Upgrading
Configuration
Licensing AuthLite
Set up User Groups
Enforce 2-factor Logons
Token Management
Use Group Policy to enforce 2-factor on Windows servers/workstations
Secure Administrative Accounts with 2-factor Authentication
Enforce 2-factor on File Shares using Access Control Lists (ACLs)
Permit 1-factor Network Access to a Server
Partial enforcement of a server (e.g. Exchange) with "Forced 2-factor Processes"
Enforce non-Windows machines with "Forced 2-factor Computers"
Enforce 2-factor logon to Office 365 with AuthLite
LDAP logon support/enforcement
Windows Workstation (Endpoint) Protection
Cached (Offline) Workstation logon with YubiKeys
Cached (Offline) Workstation logon with OATH tokens
Zero-client two-factor workstation logons
Workstation Safe mode operations
Remote Desktop
2FA over Remote Desktop Protocol
2FA with Remote Desktop Gateway / RemoteApp / RDWeb / RD Web Client
Replay Windows to support RDP and other re-authenticating protocols
Replay Behavior setting
VPN and RADIUS Configuration
Using IAS/NPS for RADIUS with AuthLite
Microsoft VPN Client settings
Wireless 802.1x Authentication
DirectAccess and NetMotion Mobility XE
Configure Watchguard SSL VPN with AuthLite
2FA for File Shares
Active Directory Deployment Notes
First: Configure Token Settings
Provisioning Tokens Administratively
User Self-Service
How to Log In
Troubleshooting
"Enroll in AuthLite" Windows program
SET UP the Self-Service Web Portal
USING the Self-Service Web Portal
View/Edit Existing Tokens
Delegate Token Management
Recovery Tokens
Multiple OTP Tokens for the Same User
Multiple users with the same OTP Token
Password Operations
CLOSE