Direct Access and 2FA

----=====REPOST FROM SECURITY BOARD=====----

Greetings,

I have a quick question.  When using DA with 2FA, if I cancel the connection attempt when I first login, I have to lock / unlock my PC to get the authentication pop up again. This is not always successful.

Is there any other way of achieving this?  I am happy enough to lock / unlock the PC (or reboot), I got to thinking if there is a more elegant way of doing this. Does anyone know if you can create a shortcut to the application (I haven't been able to identify it as of yet) that I could place on the desktop?

I have looked at posts which advise to restart the IPhelper service, but this appears to be unsupported / not recommended by Microsoft.

TIA for any help you can give.

Technologies:  Windows 7, Server 2012 R2.

Thanks

September 1st, 2015 9:06am

Hi

On Windows 7, the DirectAccess Connectivity Assistant is trapping event in the security log that indicate that PKINIT negociation was not successfull. Once trapped, DAC ask for user authentication using 2FA (Smartcard / OTP). From my knowledge there is no Other solution than restarting the IP-Helper service.

Free Windows Admin Tool Kit Click here and download it now
September 2nd, 2015 10:41am

Thanks BenoitS, appreciate the response.

G

September 3rd, 2015 3:36am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics