{"id":18084,"date":"2026-06-24T11:51:11","date_gmt":"2026-06-24T11:51:11","guid":{"rendered":"https:\/\/www.protectimus.com\/?page_id=18084"},"modified":"2026-07-07T13:01:57","modified_gmt":"2026-07-07T13:01:57","slug":"mfa-for-rdp","status":"publish","type":"page","link":"https:\/\/www.protectimus.com\/uk\/mfa-for-rdp\/","title":{"rendered":"MFA for RDP: Stop Unauthorized Remote Desktop Access Cold"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-page\" data-elementor-id=\"18084\" class=\"elementor elementor-18084\" data-elementor-post-type=\"page\">\n\t\t\t\t<div class=\"elementor-element elementor-element-223acb9 padded e-flex e-con-boxed e-con e-parent\" data-id=\"223acb9\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-e4740cc elementor-widget elementor-widget-heading\" data-id=\"e4740cc\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h1 class=\"elementor-heading-title elementor-size-default\">MFA for RDP: Stop Unauthorized Remote Desktop Access Cold<\/h1>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-b4a66c0 e-con-full e-flex e-con e-child\" data-id=\"b4a66c0\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t<div class=\"elementor-element elementor-element-0870f66 e-con-full e-flex e-con e-child\" data-id=\"0870f66\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-e128a97 elementor-widget elementor-widget-text-editor\" data-id=\"e128a97\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Remote Desktop Protocol (RDP) remains one of the most exploited remote access protocols in enterprise environments. Attackers continuously scan for exposed port 3389, use stolen credentials, and attempt lateral movement through RDP sessions. A password alone is no longer sufficient.<\/p><p>Protectimus provides a targeted MFA solution specifically for Remote Desktop. The Protectimus Winlogon component intercepts authentication at the Windows Credential Provider level, adding a strong second factor directly into the RDP login flow \u2014 without changing the existing remote access architecture.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-20c72f6 elementor-widget elementor-widget-html\" data-id=\"20c72f6\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"html.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<script type=\"application\/ld+json\">\r\n{\r\n  \"@context\": \"https:\/\/schema.org\",\r\n  \"@type\": \"BreadcrumbList\",\r\n  \"itemListElement\": [\r\n    {\r\n      \"@type\": \"ListItem\",\r\n      \"position\": 1,\r\n      \"name\": \"Home\",\r\n      \"item\": \"https:\/\/protectimus.com\/\"\r\n    },\r\n    {\r\n      \"@type\": \"ListItem\",\r\n      \"position\": 2,\r\n      \"name\": \"Solutions\",\r\n      \"item\": \"https:\/\/protectimus.com\/solutions\/\"\r\n    },\r\n    {\r\n      \"@type\": \"ListItem\",\r\n      \"position\": 3,\r\n      \"name\": \"MFA for RDP\",\r\n      \"item\": \"https:\/\/protectimus.com\/mfa-for-rdp\/\"\r\n    }\r\n  ]\r\n}\r\n<\/script>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-42bfc14 e-con-full e-flex e-con e-child\" data-id=\"42bfc14\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-6818e9e elementor-widget elementor-widget-heading\" data-id=\"6818e9e\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Table of Contents<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-282e74f elementor-widget elementor-widget-text-editor\" data-id=\"282e74f\" data-element_type=\"widget\" data-e-type=\"widget\" id=\"why-on-premise-mfa-matters-2026\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<ol><li style=\"font-weight: 400;\" aria-level=\"1\"><a href=\"#why-rdp-vector\"><span style=\"font-weight: 400;\">Why RDP Is the #1 Attack Vector in Enterprise Networks<\/span><\/a><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><a href=\"#how-protectimus-mfa\"><span style=\"font-weight: 400;\">How Protectimus MFA Works with Remote Desktop Protocol<\/span><\/a><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><a href=\"#supported-auth-methods\"><span style=\"font-weight: 400;\">Supported Authentication Methods for RDP<\/span><\/a><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><a href=\"#rdp-mfa-deployment\"><span style=\"font-weight: 400;\">RDP MFA Deployment Scenarios<\/span><\/a><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><a href=\"#system-requirements\"><span style=\"font-weight: 400;\">System Requirements &amp; Compatibility<\/span><\/a><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><a href=\"#how-to-add-mfa\"><span style=\"font-weight: 400;\">Step-by-Step: How to Add MFA to RDP in 4 Steps<\/span><\/a><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><a href=\"#advanced-config\"><span style=\"font-weight: 400;\">Advanced Configuration Options<\/span><\/a><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><a href=\"#compliance-standards\"><span style=\"font-weight: 400;\">Compliance &amp; Security Standards<\/span><\/a><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><a href=\"#customer-stories\"><span style=\"font-weight: 400;\">Customer Stories &amp; Use Cases<\/span><\/a><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><a href=\"#faq\"><span style=\"font-weight: 400;\">Frequently Asked Questions<\/span><\/a><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><a href=\"#get-started\"><span style=\"font-weight: 400;\">Get Started with RDP MFA Today<\/span><\/a><\/li><\/ol>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-b904199 padded e-flex e-con-boxed e-con e-parent\" data-id=\"b904199\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t<div class=\"elementor-element elementor-element-1b1c9bb e-con-full e-flex e-con e-child\" data-id=\"1b1c9bb\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-f07f411 elementor-widget elementor-widget-heading\" data-id=\"f07f411\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Quick Answer<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-54d9acf elementor-widget elementor-widget-text-editor\" data-id=\"54d9acf\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Deploy the Protectimus Winlogon Agent on your RDP servers, connect it to either the Protectimus cloud service or on-premises platform, and enforce MFA for RDP sessions. Most organizations complete a single server setup in under 2 hours.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-cdef92e padded e-flex e-con-boxed e-con e-parent\" data-id=\"cdef92e\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-56c84d1 elementor-widget elementor-widget-heading\" data-id=\"56c84d1\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Key facts\n<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-bff780b elementor-widget-divider--view-line elementor-widget elementor-widget-divider\" data-id=\"bff780b\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"divider.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-divider\">\n\t\t\t<span class=\"elementor-divider-separator\">\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-d391a8f e-grid e-con-boxed e-con e-child\" data-id=\"d391a8f\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t<div class=\"elementor-element elementor-element-64a96a2 border-left e-flex e-con-boxed e-con e-child\" data-id=\"64a96a2\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-4dfef98 elementor-widget elementor-widget-heading\" data-id=\"4dfef98\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Stolen credentials fuel ransomware<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-0cc1bea elementor-widget elementor-widget-heading\" data-id=\"0cc1bea\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-heading-title elementor-size-default\">Verizon 2026 DBIR<\/div>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-f5e29e2 elementor-widget elementor-widget-text-editor\" data-id=\"f5e29e2\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>73% of ransomware victims had a credential leak or infostealer infection in the year prior to the attack<\/p><p>(<a target=\"_blank\" target=\"_blank\" href=\"https:\/\/www.verizon.com\/business\/resources\/T1ae\/reports\/2026-dbir-data-breach-investigations-report.pdf\">Verizon 2026 Data Breach Investigations Report<\/a>)<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-f5947b8 border-left e-flex e-con-boxed e-con e-child\" data-id=\"f5947b8\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-fa74c1f elementor-hidden-desktop elementor-hidden-tablet elementor-widget-divider--view-line elementor-widget elementor-widget-divider\" data-id=\"fa74c1f\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"divider.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-divider\">\n\t\t\t<span class=\"elementor-divider-separator\">\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-47e43b7 elementor-widget elementor-widget-heading\" data-id=\"47e43b7\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">RDP: ransomware's favorite entry point<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-fb629a4 elementor-widget elementor-widget-heading\" data-id=\"fb629a4\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-heading-title elementor-size-default\">FBI IC3<\/div>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-8085769 elementor-widget elementor-widget-text-editor\" data-id=\"8085769\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Over 90% of ransomware incidents involve RDP as the initial access vector<\/p><p>(<a target=\"_blank\" target=\"_blank\" href=\"https:\/\/www.ic3.gov\/annualreport\/reports\/2023_ic3report.pdf\">FBI IC3 2023 Internet Crime Report<\/a>).<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-c6c866e elementor-hidden-desktop elementor-hidden-tablet elementor-widget-divider--view-line elementor-widget elementor-widget-divider\" data-id=\"c6c866e\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"divider.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-divider\">\n\t\t\t<span class=\"elementor-divider-separator\">\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-5c0d1fa border-left e-flex e-con-boxed e-con e-child\" data-id=\"5c0d1fa\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-d45db87 elementor-widget elementor-widget-heading\" data-id=\"d45db87\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">CISA Alert AA22-074A<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-344d455 elementor-widget elementor-widget-heading\" data-id=\"344d455\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-heading-title elementor-size-default\">CISA<\/div>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-3a4d317 elementor-widget elementor-widget-text-editor\" data-id=\"3a4d317\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>CISA calls out RDP as a primary attack vector and recommends MFA as the top mitigation<\/p><p><a target=\"_blank\" target=\"_blank\" href=\"https:\/\/www.cisa.gov\/news-events\/cybersecurity-advisories\/aa22-074a\">(CISA Alert AA22-074A)<\/a><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-0ae1e9a padded e-flex e-con-boxed e-con e-parent\" data-id=\"0ae1e9a\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-e899921 elementor-widget elementor-widget-heading\" data-id=\"e899921\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Key Takeaways<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-86d1b8b elementor-widget elementor-widget-spacer\" data-id=\"86d1b8b\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"spacer.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-spacer\">\n\t\t\t<div class=\"elementor-spacer-inner\"><\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-9d5e935 e-grid e-con-full e-con e-child\" data-id=\"9d5e935\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t<div class=\"elementor-element elementor-element-12e9470 e-con-full e-flex e-con e-child\" data-id=\"12e9470\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-8644d62 elementor-widget elementor-widget-image\" data-id=\"8644d62\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" width=\"57\" height=\"57\" src=\"https:\/\/www.protectimus.com\/wp-content\/uploads\/2026\/05\/vpn2.svg\" class=\"attachment-full size-full wp-image-16525\" alt=\"VPN MFA icon\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-317cba7 elementor-widget elementor-widget-heading\" data-id=\"317cba7\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">No VPN dependency<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-d96a026 elementor-widget elementor-widget-text-editor\" data-id=\"d96a026\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>MFA challenge occurs at the Windows Credential Provider level, before the session opens.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-68b5ae8 e-con-full e-flex e-con e-child\" data-id=\"68b5ae8\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-8b57400 elementor-widget elementor-widget-image\" data-id=\"8b57400\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" width=\"64\" height=\"64\" src=\"https:\/\/www.protectimus.com\/wp-content\/uploads\/2024\/02\/icon-enh-sec.svg\" class=\"attachment-full size-full wp-image-345\" alt=\"Enhanced Security icon\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-767e2aa elementor-widget elementor-widget-heading\" data-id=\"767e2aa\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Emergency access<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-d73153e elementor-widget elementor-widget-text-editor\" data-id=\"d73153e\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>One-time backup codes provide a secure recovery option when normal MFA validation cannot be performed.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-9d3b5b8 e-con-full e-flex e-con e-child\" data-id=\"9d3b5b8\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-89d54f8 elementor-widget elementor-widget-image\" data-id=\"89d54f8\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" width=\"28\" height=\"28\" src=\"https:\/\/www.protectimus.com\/wp-content\/uploads\/2024\/03\/icon-radius.svg\" class=\"attachment-full size-full wp-image-1669\" alt=\"MFA for RADIUS icon\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-f7f585d elementor-widget elementor-widget-heading\" data-id=\"f7f585d\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Full NLA-compatibility<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-aff0db8 elementor-widget elementor-widget-text-editor\" data-id=\"aff0db8\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Works with Network Level Authentication enabled \u2014 the recommended security baseline for all RDP deployments.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-9ddacc7 e-con-full e-flex e-con e-child\" data-id=\"9ddacc7\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-82d1654 elementor-widget elementor-widget-image\" data-id=\"82d1654\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"56\" height=\"56\" src=\"https:\/\/www.protectimus.com\/wp-content\/uploads\/2024\/02\/icon-windows.svg\" class=\"attachment-full size-full wp-image-547\" alt=\"MFA for Windows and RDP icon\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-eb78c60 elementor-widget elementor-widget-heading\" data-id=\"eb78c60\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Broad Service Coverage<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-ee318b2 elementor-widget elementor-widget-text-editor\" data-id=\"ee318b2\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">Protects AD, VPN gateways, ADFS-federated apps, Windows logon and RDP, OWA, and custom web applications.<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-cb9fab9 e-con-full e-flex e-con e-child\" data-id=\"cb9fab9\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-1b3c387 elementor-widget elementor-widget-image\" data-id=\"1b3c387\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"64\" height=\"64\" src=\"https:\/\/www.protectimus.com\/wp-content\/uploads\/2025\/03\/key-5.svg\" class=\"attachment-full size-full wp-image-12236\" alt=\"On-Premise MFA Platform \u2013 Security feature: A Cluster-Based, Fault-Tolerant System\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-84c6048 elementor-widget elementor-widget-heading\" data-id=\"84c6048\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Scalable deployment<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-1abcc56 elementor-widget elementor-widget-text-editor\" data-id=\"1abcc56\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>The <a href=\"https:\/\/www.protectimus.com\/uk\/winlogon\/\">Protectimus Winlogon component<\/a> supports centralized deployment via GPO, simplifying rollout across large Windows environments.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-7c15682 e-con-full e-flex e-con e-child\" data-id=\"7c15682\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-ffb514c elementor-widget__width-initial elementor-widget elementor-widget-image\" data-id=\"ffb514c\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"57\" height=\"56\" src=\"https:\/\/www.protectimus.com\/wp-content\/uploads\/2026\/05\/plat_new.svg\" class=\"attachment-full size-full wp-image-16519\" alt=\"On-premise MFA platform icon\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-3382fca elementor-widget elementor-widget-heading\" data-id=\"3382fca\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Deployment flexibility<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-785b26a elementor-widget elementor-widget-text-editor\" data-id=\"785b26a\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Cloud SaaS or <a href=\"https:\/\/www.protectimus.com\/uk\/platform\/\">on-premises MFA platform<\/a> with full data residency control.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-30a9584 elementor-widget elementor-widget-spacer\" data-id=\"30a9584\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"spacer.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-spacer\">\n\t\t\t<div class=\"elementor-spacer-inner\"><\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-5b50e5c padded e-flex e-con-boxed e-con e-parent\" data-id=\"5b50e5c\" data-element_type=\"container\" data-e-type=\"container\" id=\"why-rdp-vector\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t<div class=\"elementor-element elementor-element-28b1e56 e-con-full e-flex e-con e-child\" data-id=\"28b1e56\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-a6f90e4 elementor-widget elementor-widget-heading\" data-id=\"a6f90e4\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Why RDP Is the #1 Attack Vector in Enterprise Networks<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-9d2498b elementor-widget elementor-widget-text-editor\" data-id=\"9d2498b\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>In the early days of the pandemic, organizations scrambled to expose RDP to the internet. Many never locked it back down. Today, security scanners consistently find millions of hosts with port 3389 reachable from the public internet \u2014 and attackers know exactly where to look.<\/p><p>The threat model against RDP-exposed systems breaks into three categories, each of which a password alone cannot stop:<\/p><p><b>Credential stuffing and brute force.<\/b><span style=\"font-weight: 400;\"> Attackers cycle through credential lists from previous breaches \u2014 billions of username\/password pairs traded on dark web forums and Telegram channels. A strong password offers no protection if it was reused from a breached site. Tools like Hydra and Medusa attempt thousands of RDP login combinations per minute against unthrottled endpoints.<\/span><\/p><p><b>Pass-the-hash and Kerberoasting.<\/b><span style=\"font-weight: 400;\"> Once an attacker has a foothold on any Windows machine in your environment \u2014 through phishing, a vulnerable web app, anything \u2014 they can harvest NTLM hashes from memory using Mimikatz and authenticate to other Windows systems via RDP without ever knowing the plaintext password. A time-based OTP (TOTP) generated fresh every 30 seconds is not stored anywhere that pass-the-hash can reach.<\/span><\/p><p><b>RDP vulnerabilities.<\/b><span style=\"font-weight: 400;\"> CVE-2019-0708 (BlueKeep) and CVE-2019-1181\/1182 (DejaBlue) demonstrated that RDP itself can contain pre-authentication memory corruption vulnerabilities. Patching remains the primary control, but defense in depth requires a second authentication layer even on fully patched servers.<\/span><\/p><p><b>IP allowlisting is not a substitute for MFA.<\/b><span style=\"font-weight: 400;\"> Firewall rules allowing only known corporate IPs fail in four common situations: employees on dynamic home ISPs; business travel; third-party vendor access; and \u2014 most critically \u2014 any attacker who has already compromised a machine inside the allowed range. An internal attacker moving laterally via RDP hits the same allowlist your admin uses.<\/span><\/p><p><span style=\"font-weight: 400;\">NIST SP 800-63B is explicit on this point: any RDP endpoint accessible from more than a single trusted physical location should require MFA.<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-d57877c padded e-flex e-con-boxed e-con e-parent\" data-id=\"d57877c\" data-element_type=\"container\" data-e-type=\"container\" id=\"how-protectimus-mfa\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t<div class=\"elementor-element elementor-element-1698709 e-con-full e-flex e-con e-child\" data-id=\"1698709\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-88c2197 elementor-widget elementor-widget-heading\" data-id=\"88c2197\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">How Protectimus MFA Works with Remote Desktop Protocol<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-83f93dd elementor-widget elementor-widget-text-editor\" data-id=\"83f93dd\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>The Protectimus Winlogon Agent integrates at the Windows Credential Provider layer \u2014 the authentication subsystem between user input and the Windows logon process (winlogon.exe \/ LogonUI). The MFA challenge occurs after credentials are submitted but before Windows grants the session.<\/p><p>\u00a0<\/p><h3><span style=\"font-weight: 400;\">Authentication flow<\/span><\/h3><div style=\"max-width: 620px; margin: 30px 0; font-family: Arial,sans-serif;\"><div><div style=\"width: 460px; box-sizing: border-box; padding: 16px 20px; border: 1px solid #111111; background: linear-gradient(135deg, rgba(123,225,255,.35) 0%, rgba(123,225,255,.18) 45%, rgba(123,225,255,0) 100%); text-align: center;\"><strong>Remote User<\/strong><br \/><small>Starts RDP connection (TCP 3389)<\/small><\/div><div style=\"width: 460px; text-align: center; margin: 8px 0;\"><div style=\"width: 2px; height: 18px; background: #111; margin: 0 auto;\">\u00a0<\/div><div style=\"font-size: 13px; line-height: 10px; color: #111;\">\u25bc<\/div><\/div><div style=\"width: 460px; box-sizing: border-box; padding: 16px 20px; border: 1px solid #111111; background: linear-gradient(135deg, rgba(123,225,255,.35) 0%, rgba(123,225,255,.18) 45%, rgba(123,225,255,0) 100%); text-align: center;\"><strong>Windows RDP Stack + NLA<\/strong><br \/><small>Windows credentials submitted<\/small><\/div><div style=\"width: 460px; text-align: center; margin: 8px 0;\"><div style=\"width: 2px; height: 18px; background: #111; margin: 0 auto;\">\u00a0<\/div><div style=\"font-size: 13px; line-height: 10px; color: #111;\">\u25bc<\/div><\/div><div style=\"width: 460px; box-sizing: border-box; padding: 16px 20px; border: 1px solid #111111; background: linear-gradient(135deg, rgba(123,225,255,.35) 0%, rgba(123,225,255,.18) 45%, rgba(123,225,255,0) 100%); text-align: center;\"><strong>Windows Credential Provider<\/strong><br \/><small>Protectimus Winlogon Agent requests MFA<\/small><\/div><div style=\"width: 460px; text-align: center; margin: 8px 0;\"><div style=\"width: 2px; height: 18px; background: #111; margin: 0 auto;\">\u00a0<\/div><div style=\"font-size: 13px; line-height: 10px; color: #111;\">\u25bc<\/div><\/div><div style=\"width: 460px; box-sizing: border-box; padding: 16px 20px; border: 1px solid #111111; background: linear-gradient(135deg, rgba(123,225,255,.35) 0%, rgba(123,225,255,.18) 45%, rgba(123,225,255,0) 100%); text-align: center;\"><p><strong>Protectimus MFA Server<\/strong><br \/><small>Cloud or On-Prem<\/small><\/p><p><small><strong>OTP verified<\/strong><\/small><\/p><\/div><div style=\"width: 460px; text-align: center; margin: 8px 0;\"><div style=\"width: 2px; height: 18px; background: #111; margin: 0 auto;\">\u00a0<\/div><div style=\"font-size: 13px; line-height: 10px; color: #111;\">\u25bc<\/div><\/div><div style=\"width: 460px; box-sizing: border-box; padding: 16px 20px; border: 1px solid #111111; background: linear-gradient(135deg, rgba(123,225,255,.60) 0%, rgba(123,225,255,.38) 45%, rgba(123,225,255,.08) 100%); text-align: center;\"><strong>Windows Logon<\/strong><br \/><small>Session Granted<\/small><\/div><\/div><\/div><h3>\u00a0<\/h3><h3><span style=\"font-weight: 400;\">NLA compatibility<\/span><\/h3><p><span style=\"font-weight: 400;\">NLA authenticates the user before the full desktop session opens. The Protectimus agent is fully compatible with NLA and does not require NLA to be disabled. Users enter their Windows credentials and OTP as part of the same authentication flow. Keep NLA enabled alongside MFA \u2014 they address different parts of the attack surface (NLA reduces denial-of-service exposure; MFA stops credential abuse).<\/span><\/p><p><span style=\"font-weight: 400;\">Because Protectimus operates at the Windows Credential Provider layer, it protects both local Windows logons and Remote Desktop sessions using the same authentication mechanism. After successful OTP verification, the original Windows credentials continue through the standard Windows authentication process, preserving compatibility with existing Active Directory and local account authentication workflows.<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-86abc7e padded e-flex e-con-boxed e-con e-parent\" data-id=\"86abc7e\" data-element_type=\"container\" data-e-type=\"container\" id=\"supported-auth-methods\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t<div class=\"elementor-element elementor-element-f0f2e30 e-con-full e-flex e-con e-child\" data-id=\"f0f2e30\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-684bcff elementor-widget elementor-widget-heading\" data-id=\"684bcff\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Supported Authentication Methods for RDP<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-4b52e3d elementor-widget elementor-widget-text-editor\" data-id=\"4b52e3d\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<table><thead><tr><th><p><b>Method<\/b><\/p><\/th><th><p><b>App \/ Device<\/b><\/p><\/th><th><p><b>Recommended For<\/b><\/p><\/th><th><p><b>Available for Automatic Enrollment<\/b><\/p><\/th><\/tr><\/thead><tbody><tr><td><p><b>TOTP authenticator app<\/b><\/p><\/td><td><p><span style=\"font-weight: 400;\"><a href=\"https:\/\/www.protectimus.com\/uk\/token\/smart\/\">Protectimus SMART<\/a>, Google Authenticator, etc.<\/span><\/p><\/td><td><p><span style=\"font-weight: 400;\">Most users and standard RDP deployments<\/span><\/p><\/td><td><p><span style=\"font-weight: 400;\">Yes<\/span><\/p><\/td><\/tr><tr><td><p><b>SMS OTP<\/b><\/p><\/td><td><p><a href=\"https:\/\/www.protectimus.com\/uk\/token\/sms\/\"><span style=\"font-weight: 400;\">Protectimus SMS<\/span><\/a><\/p><\/td><td><p><span style=\"font-weight: 400;\">Users who cannot use authenticator apps<\/span><\/p><\/td><td><p><span style=\"font-weight: 400;\">Yes<\/span><\/p><\/td><\/tr><tr><td><p><b>Email OTP<\/b><\/p><\/td><td><p><a href=\"https:\/\/www.protectimus.com\/uk\/token\/mail\/\"><span style=\"font-weight: 400;\">Protectimus MAIL<\/span><\/a><\/p><\/td><td><p><span style=\"font-weight: 400;\">Users without access to smartphones or hardware tokens<\/span><\/p><\/td><td><p><span style=\"font-weight: 400;\">Yes<\/span><\/p><\/td><\/tr><tr><td><p><b>Chatbot OTP<\/b><\/p><\/td><td><p><span style=\"font-weight: 400;\"><a href=\"https:\/\/www.protectimus.com\/uk\/token\/bot\/\">Protectimus BOT<\/a> (Telegram, Viber, Facebook Messenger)<\/span><\/p><\/td><td><p><span style=\"font-weight: 400;\">Users who prefer receiving OTPs in messaging apps<\/span><\/p><\/td><td><p><span style=\"font-weight: 400;\">No<\/span><\/p><\/td><\/tr><tr><td><p><b>Push notifications<\/b><\/p><\/td><td><p><a href=\"https:\/\/www.protectimus.com\/uk\/token\/push\/\"><span style=\"font-weight: 400;\">Protectimus PUSH<\/span><\/a><\/p><\/td><td><p><span style=\"font-weight: 400;\">Users who prefer one-tap authentication<\/span><\/p><\/td><td><p><span style=\"font-weight: 400;\">No<\/span><\/p><\/td><\/tr><tr><td><p><b>Hardware token (key fob)<\/b><\/p><\/td><td><p><span style=\"font-weight: 400;\"><a href=\"https:\/\/www.protectimus.com\/uk\/token\/two\/\">Protectimus TWO<\/a>, <a href=\"https:\/\/www.protectimus.com\/uk\/token\/flex\/\">Protectimus FLEX<\/a>, <a href=\"https:\/\/www.protectimus.com\/uk\/token\/shark\/\">Protectimus SHARK<\/a><\/span><\/p><\/td><td><p><span style=\"font-weight: 400;\">Industrial, healthcare, and no-smartphone environments<\/span><\/p><\/td><td><p><span style=\"font-weight: 400;\">No<\/span><\/p><\/td><\/tr><tr><td><p><b>Hardware token (card)<\/b><\/p><\/td><td><p><a href=\"https:\/\/www.protectimus.com\/uk\/token\/slim\/\"><span style=\"font-weight: 400;\">Protectimus Slim NFC<\/span><\/a><\/p><\/td><td><p><span style=\"font-weight: 400;\">Employees who already carry access cards or ID badges<\/span><\/p><\/td><td><p><span style=\"font-weight: 400;\">No<\/span><\/p><\/td><\/tr><\/tbody><\/table><p>\u00a0<\/p><p><b>Note:<\/b><span style=\"font-weight: 400;\"> Automatic enrollment currently supports Protectimus SMART OTP, SMS OTP, and Email OTP. Push notifications, hardware tokens, and OTP delivery via chatbots in messaging apps can be assigned manually by administrators.<\/span><\/p><p><a href=\"https:\/\/www.protectimus.com\/uk\/tokens\/\"><span style=\"font-weight: 400;\">Hardware TOTP tokens<\/span><\/a><span style=\"font-weight: 400;\"> are particularly relevant for RDP in industrial or healthcare settings where smartphones are prohibited. The Protectimus Slim NFC and Protectimus FLEX can be reprogrammed over NFC when needed, allowing the same token to be reused instead of being replaced.<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-280411b padded e-flex e-con-boxed e-con e-parent\" data-id=\"280411b\" data-element_type=\"container\" data-e-type=\"container\" id=\"rdp-mfa-deployment\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t<div class=\"elementor-element elementor-element-2bd5d59 e-con-full e-flex e-con e-child\" data-id=\"2bd5d59\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-347cae5 elementor-widget elementor-widget-heading\" data-id=\"347cae5\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">RDP MFA Deployment Scenarios<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-3977085 elementor-widget elementor-widget-text-editor\" data-id=\"3977085\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h3><span style=\"font-weight: 400;\">Scenario 1: Standalone Windows Server<\/span><\/h3><p><span style=\"font-weight: 400;\">Install the Protectimus Winlogon Agent on the Windows server, connect it to the Protectimus service or on-premises platform, and configure users and authentication methods. All RDP sessions \u2014 and local console logins \u2014 to that server now require a second factor. Typical for branch offices, jump hosts, or small business servers.<\/span><\/p><p>\u00a0<\/p><h3><span style=\"font-weight: 400;\">Scenario 2: Multi-Server Environment<\/span><\/h3><p><span style=\"font-weight: 400;\">In environments with multiple Windows servers, install the Protectimus Winlogon Agent on each server that accepts user logins. All servers can be connected to the same Protectimus Resource, allowing administrators to manage MFA policies, users, and authentication methods centrally while protecting every RDP endpoint.<\/span><\/p><p>\u00a0<\/p><h3><span style=\"font-weight: 400;\">Scenario 3: Active Directory Deployment via GPO<\/span><\/h3><p><span style=\"font-weight: 400;\">For larger environments, Protectimus supports centralized deployment through Group Policy. Administrators can install the component on a Domain Controller and create a GPO for automatic deployment across selected servers and workstations. This significantly reduces rollout effort and ensures consistent MFA protection throughout the Windows environment.<\/span><\/p><p>\u00a0<\/p><p><b>Note:<\/b><span style=\"font-weight: 400;\"> Protectimus Winlogon protects Windows logons and RDP access on the systems where the component is installed. Organizations seeking MFA protection across all Active Directory\u2013integrated services may also consider <\/span><a href=\"https:\/\/www.protectimus.com\/uk\/mfa-for-active-directory\/\"><span style=\"font-weight: 400;\">MFA for Active Directory<\/span><\/a><span style=\"font-weight: 400;\"> via Protectimus DSPA, which enforces dynamic one-time passwords at the directory level.<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-a29b829 padded e-flex e-con-boxed e-con e-parent\" data-id=\"a29b829\" data-element_type=\"container\" data-e-type=\"container\" id=\"system-requirements\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t<div class=\"elementor-element elementor-element-1dc9ec2 e-con-full e-flex e-con e-child\" data-id=\"1dc9ec2\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-131348d elementor-widget elementor-widget-heading\" data-id=\"131348d\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">System Requirements &amp; Compatibility<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-5266633 elementor-widget elementor-widget-text-editor\" data-id=\"5266633\" data-element_type=\"widget\" data-e-type=\"widget\" id=\"supported-mfa-methods\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h3><span style=\"font-weight: 400;\">Supported Windows OS (RDP host)<\/span><\/h3><table><thead><tr><th><p><b>OS<\/b><\/p><\/th><th><p><b>Status<\/b><\/p><\/th><\/tr><\/thead><tbody><tr><td><p><span style=\"font-weight: 400;\">Windows Server 2022<\/span><\/p><\/td><td><p><span style=\"font-weight: 400;\">Fully supported<\/span><\/p><\/td><\/tr><tr><td><p><span style=\"font-weight: 400;\">Windows Server 2019<\/span><\/p><\/td><td><p><span style=\"font-weight: 400;\">Fully supported<\/span><\/p><\/td><\/tr><tr><td><p><span style=\"font-weight: 400;\">Windows Server 2016<\/span><\/p><\/td><td><p><span style=\"font-weight: 400;\">Fully supported<\/span><\/p><\/td><\/tr><tr><td><p><span style=\"font-weight: 400;\">Windows Server 2012 \/ 2012 R2<\/span><\/p><\/td><td><p><span style=\"font-weight: 400;\">Fully supported<\/span><\/p><\/td><\/tr><tr><td><p><span style=\"font-weight: 400;\">Windows 10 \/ 11<\/span><\/p><\/td><td><p><span style=\"font-weight: 400;\">Fully supported<\/span><\/p><\/td><\/tr><tr><td><p><span style=\"font-weight: 400;\">Windows 8 \/ 8.1<\/span><\/p><\/td><td><p><span style=\"font-weight: 400;\">Fully supported<\/span><\/p><\/td><\/tr><\/tbody><\/table><p>\u00a0<\/p><p><span style=\"font-weight: 400;\">AD-joined and standalone workgroup servers are both supported. No Active Directory schema changes or custom directory extensions are required.<\/span><\/p><p>\u00a0<\/p><h3><span style=\"font-weight: 400;\">Protectimus server requirements (on-premises)<\/span><\/h3><table><thead><tr><th><p><b>Component<\/b><\/p><\/th><th><p><b>Minimum<\/b><\/p><\/th><\/tr><\/thead><tbody><tr><td><p><span style=\"font-weight: 400;\">CPU<\/span><\/p><\/td><td><p><span style=\"font-weight: 400;\">2 vCPU<\/span><\/p><\/td><\/tr><tr><td><p><span style=\"font-weight: 400;\">RAM<\/span><\/p><\/td><td><p><span style=\"font-weight: 400;\">8 GB<\/span><\/p><\/td><\/tr><tr><td><p><span style=\"font-weight: 400;\">Storage<\/span><\/p><\/td><td><p><span style=\"font-weight: 400;\">20 GB<\/span><\/p><\/td><\/tr><tr><td><p><span style=\"font-weight: 400;\">OS<\/span><\/p><\/td><td><p><span style=\"font-weight: 400;\">Linux, Windows, FreeBSD<\/span><\/p><\/td><\/tr><tr><td><p><span style=\"font-weight: 400;\">Java<\/span><\/p><\/td><td><p><span style=\"font-weight: 400;\">JDK 8+<\/span><\/p><\/td><\/tr><tr><td><p><span style=\"font-weight: 400;\">Database<\/span><\/p><\/td><td><p><span style=\"font-weight: 400;\">PostgreSQL 10+<\/span><\/p><\/td><\/tr><\/tbody><\/table><p>\u00a0<\/p><p><span style=\"font-weight: 400;\">For cloud deployment, no server infrastructure is required beyond the Winlogon Agent on the RDP host.<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-16797b4 padded e-flex e-con-boxed e-con e-parent\" data-id=\"16797b4\" data-element_type=\"container\" data-e-type=\"container\" id=\"how-to-add-mfa\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t<div class=\"elementor-element elementor-element-bb86bc5 e-con-full e-flex e-con e-child\" data-id=\"bb86bc5\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-891beb3 elementor-widget elementor-widget-heading\" data-id=\"891beb3\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Step-by-Step: How to Add MFA to RDP in 4 Steps<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-d7f6098 elementor-widget elementor-widget-text-editor\" data-id=\"d7f6098\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h3><span style=\"font-weight: 400;\">Step 1: Deploy the Protectimus Authentication Server<\/span><\/h3><p><span style=\"font-weight: 400;\">Choose your deployment model:<\/span><\/p><p><b>Cloud:<\/b><span style=\"font-weight: 400;\"> Register at service.protectimus.com. No server infrastructure is required. The free plan includes up to 10 users, and new accounts receive a $25 testing credit for evaluating paid authentication methods and filters.<\/span><\/p><p><b>On-Premises:<\/b><span style=\"font-weight: 400;\"> Install the Protectimus On-Premise Platform on your own infrastructure. Configure the database, create an administrator account, and verify access to the management console.<\/span><\/p><p><span style=\"font-weight: 400;\">After deployment, create a Resource that will be used to manage users, tokens, and Winlogon access policies.<\/span><\/p><p>\u00a0<\/p><h3><span style=\"font-weight: 400;\">Step 2: Configure Winlogon Access Policies<\/span><\/h3><p><span style=\"font-weight: 400;\">Open the Resource settings and navigate to the <\/span><b>Winlogon<\/b><span style=\"font-weight: 400;\"> tab.<\/span><\/p><p>\u00a0<\/p><p><span style=\"font-weight: 400;\">Configure the required access policies, including:<\/span><\/p><ul><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Enable access for local Windows logons and\/or RDP sessions.<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Enable two-factor authentication.<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Configure automatic user registration.<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Configure automatic token enrollment.<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Select the authentication methods available for automatic enrollment (Protectimus SMART OTP, SMS OTP, or Email OTP).<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Configure trusted IP addresses, if required.<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Choose whether MFA should be required for all users or only selected accounts.<\/span><\/li><\/ul><p>\u00a0<\/p><p><span style=\"font-weight: 400;\">For most deployments, Protectimus recommends enabling automatic registration of users and tokens.<\/span><\/p><h3>\u00a0<\/h3><h3><span style=\"font-weight: 400;\">Step 3: Install the Protectimus Winlogon Agent<\/span><\/h3><p><span style=\"font-weight: 400;\">Download the latest <\/span><a href=\"https:\/\/www.protectimus.com\/uk\/winlogon\/\"><span style=\"font-weight: 400;\">Protectimus Winlogon installer<\/span><\/a><span style=\"font-weight: 400;\"> and run it on the Windows server you want to protect.<\/span><\/p><p>\u00a0<\/p><p><span style=\"font-weight: 400;\">During installation, provide:<\/span><\/p><ul><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">API URL<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Account login<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">API key<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Resource ID<\/span><\/li><\/ul><p>\u00a0<\/p><p><span style=\"font-weight: 400;\">You can also configure:<\/span><\/p><ul><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">MFA policies for local and RDP logons<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Offline access settings<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Backup code generation<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">RDP-only MFA enforcement<\/span><\/li><\/ul><p>\u00a0<\/p><p><span style=\"font-weight: 400;\">In Active Directory environments, administrators can additionally deploy the component through Group Policy (GPO) or perform remote installation from a Domain Controller.<\/span><\/p><p>\u00a0<\/p><h3><span style=\"font-weight: 400;\">Step 4: Enroll Users and Test Authentication<\/span><\/h3><p><span style=\"font-weight: 400;\">If automatic registration is enabled, users will be prompted to enroll an authentication method during their first successful login.<\/span><\/p><p><span style=\"font-weight: 400;\">Organizations using hardware OTP tokens, push notification or chatbot-based authentication can create users and assign tokens manually.<\/span><\/p><p><span style=\"font-weight: 400;\">After enrollment, verify both local Windows logons and Remote Desktop logons to confirm that MFA policies are applied correctly. Before ending the current administrator session, test authentication using a secondary account to avoid accidental lockout caused by configuration errors.<\/span><\/p><p><span style=\"font-weight: 400;\">For detailed screenshots and deployment examples, see the <\/span><a href=\"https:\/\/www.protectimus.com\/uk\/guides\/winlogon-rdp\/\"><span style=\"font-weight: 400;\">full step-by-step RDP integration guide<\/span><\/a><span style=\"font-weight: 400;\">.<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-dd147b2 padded e-flex e-con-boxed e-con e-parent\" data-id=\"dd147b2\" data-element_type=\"container\" data-e-type=\"container\" id=\"advanced-config\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t<div class=\"elementor-element elementor-element-c9b7b25 e-con-full e-flex e-con e-child\" data-id=\"c9b7b25\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-fad9de1 elementor-widget elementor-widget-heading\" data-id=\"fad9de1\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Advanced Configuration Options<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-78865c0 elementor-widget elementor-widget-text-editor\" data-id=\"78865c0\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<table><thead><tr><th><p><b>Option<\/b><\/p><\/th><th><p><b>What it does<\/b><\/p><\/th><\/tr><\/thead><tbody><tr><td><p><span style=\"font-weight: 400;\">Separate Local and RDP Policies<\/span><\/p><\/td><td><p><span style=\"font-weight: 400;\">Configure different access rules for local Windows logons and Remote Desktop sessions. For example, require MFA only for RDP access while allowing standard local logons.<\/span><\/p><\/td><\/tr><tr><td><p><span style=\"font-weight: 400;\">Automatic User Registration<\/span><\/p><\/td><td><p><span style=\"font-weight: 400;\">Automatically create user accounts in Protectimus when users log in for the first time.<\/span><\/p><\/td><\/tr><tr><td><p><span style=\"font-weight: 400;\">Automatic Token Enrollment<\/span><\/p><\/td><td><p><span style=\"font-weight: 400;\">Prompt users to enroll a supported authentication method during their first login.<\/span><\/p><\/td><\/tr><tr><td><p><span style=\"font-weight: 400;\">Trusted IP Addresses<\/span><\/p><\/td><td><p><span style=\"font-weight: 400;\">Allow users to log in without an OTP when connecting from specified trusted IP addresses.<\/span><\/p><\/td><\/tr><tr><td><p><span style=\"font-weight: 400;\">GPO Deployment<\/span><\/p><\/td><td><p><span style=\"font-weight: 400;\">Deploy, update, and remove the Winlogon component centrally through Active Directory Group Policy.<\/span><\/p><\/td><\/tr><tr><td><p><span style=\"font-weight: 400;\">Remote Installation<\/span><\/p><\/td><td><p><span style=\"font-weight: 400;\">Install the Winlogon component directly on selected domain computers from a Domain Controller without waiting for GPO processing.<\/span><\/p><\/td><\/tr><tr><td><p><span style=\"font-weight: 400;\">Installation Protection<\/span><\/p><\/td><td><p><span style=\"font-weight: 400;\">Prevent unauthorized removal of the Winlogon component from managed workstations.<\/span><\/p><\/td><\/tr><\/tbody><\/table>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-a2442ac padded e-flex e-con-boxed e-con e-parent\" data-id=\"a2442ac\" data-element_type=\"container\" data-e-type=\"container\" id=\"compliance-standards\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t<div class=\"elementor-element elementor-element-d2891c1 e-con-full e-flex e-con e-child\" data-id=\"d2891c1\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-f2847f8 elementor-widget elementor-widget-heading\" data-id=\"f2847f8\" data-element_type=\"widget\" data-e-type=\"widget\" id=\"howtosetup\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Compliance &amp; Security Standards<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-32a2622 elementor-widget elementor-widget-text-editor\" data-id=\"32a2622\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">MFA for RDP maps directly to authentication requirements across the major frameworks:<\/span><\/p><p><b>NIST SP 800-63B<\/b><span style=\"font-weight: 400;\"> \u2014 Assurance Level 2+ requires MFA for remote access. TOTP-based authenticators satisfy the &#8220;something you have&#8221; requirement. <\/span><a target=\"_blank\" target=\"_blank\" href=\"https:\/\/pages.nist.gov\/800-63-3\/sp800-63b.html\"><span style=\"font-weight: 400;\">See NIST SP 800-63B<\/span><\/a><span style=\"font-weight: 400;\">.<\/span><\/p><p><b>HIPAA Security Rule<\/b><span style=\"font-weight: 400;\"> \u2014 Requires technical controls against unauthorized ePHI access over a network. RDP to healthcare servers transmits ePHI; MFA is the primary control. <\/span><a target=\"_blank\" target=\"_blank\" href=\"https:\/\/www.hhs.gov\/hipaa\/for-professionals\/security\/index.html\"><span style=\"font-weight: 400;\">See HHS guidance<\/span><\/a><span style=\"font-weight: 400;\">.<\/span><\/p><p><b>PCI DSS v4.0<\/b><span style=\"font-weight: 400;\"> \u2014 Requirement 8.4.2 mandates MFA for all non-console administrative access into the cardholder data environment. RDP is explicitly non-console.<\/span><\/p><p><b>SOC 2 (Type II)<\/b><span style=\"font-weight: 400;\"> \u2014 CC6.1 (logical access controls). Auditors flag RDP without MFA. A documented deployment with event logging typically satisfies the evidence requirement.<\/span><\/p><p><b>ISO 27001:2022<\/b><span style=\"font-weight: 400;\"> \u2014 Annex A control 8.5 requires strong authentication for privileged and remote access.<\/span><\/p><p><b>NIS2 Directive (EU)<\/b><span style=\"font-weight: 400;\"> \u2014 Article 21 mandates MFA for essential and important entities. RDP to production systems is clearly in scope.<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-338e4d4 padded e-flex e-con-boxed e-con e-parent\" data-id=\"338e4d4\" data-element_type=\"container\" data-e-type=\"container\" id=\"customer-stories\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t<div class=\"elementor-element elementor-element-0b17976 e-con-full e-flex e-con e-child\" data-id=\"0b17976\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-d16fba0 elementor-widget elementor-widget-heading\" data-id=\"d16fba0\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Customer Stories &amp; Use Cases<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-aaf822b elementor-widget elementor-widget-text-editor\" data-id=\"aaf822b\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h3><span style=\"font-weight: 400;\">Financial services: post-incident hardening across 200+ servers<\/span><\/h3><p><span style=\"font-weight: 400;\">A regional financial services firm experienced a credential stuffing incident: an attacker authenticated to a Windows Server via RDP using credentials from an unrelated SaaS breach and moved laterally for 40 minutes before a SIEM alert fired. The CISO needed deployment across 200+ servers in under two weeks without AD schema changes \u2014 a schema modification would have taken months through their change control process. The team pushed the Winlogon Agent via Group Policy MSI. Users enrolled their authentication methods during their first successful Windows or RDP login. Within 10 days, every RDP-accessible server required a second factor; 15 senior administrators on the trading floor received hardware tokens instead of smartphone apps.<\/span><\/p><h3><span style=\"font-weight: 400;\">Healthcare: HIPAA audit readiness<\/span><\/h3><p><span style=\"font-weight: 400;\">A multi-site healthcare provider had one gap in their HIPAA Security Rule review: RDP access to EMR servers without MFA. Their legal team required all authentication data to remain on-premises, since authentication logs would contain sensitive user access information and timestamps related to systems processing ePHI. The on-premises Protectimus platform was operational in under three hours. The external auditor accepted the event log export as part of the organization&#8217;s evidence for HIPAA audit controls under 45 CFR \u00a7 164.312(b).<\/span><\/p><h3><span style=\"font-weight: 400;\">Manufacturing: hardware token rollout, no smartphones<\/span><\/h3><p><span style=\"font-weight: 400;\">An automotive parts manufacturer needed MFA for production floor Windows servers where operators don&#8217;t carry smartphones and cell signal is unreliable. The company standardized on Protectimus Slim NFC tokens \u2014 card format carried alongside access badges. Tokens were pre-provisioned by the administrator; no end-user enrollment step required. Hardware TOTP tokens continue generating one-time passwords without internet or cellular connectivity, making them well suited for environments where smartphones are prohibited or mobile coverage is unreliable.<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-a9cb282 padded e-flex e-con-boxed e-con e-parent\" data-id=\"a9cb282\" data-element_type=\"container\" data-e-type=\"container\" id=\"faq\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-7659ffd elementor-widget elementor-widget-heading\" data-id=\"7659ffd\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">FAQ<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-dc81e4c e-con-full padded e-flex e-con e-child\" data-id=\"dc81e4c\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t<div class=\"elementor-element elementor-element-fb2596d e-con-full faq-container e-flex e-con e-child\" data-id=\"fb2596d\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-412fa06 plus-right elementor-widget elementor-widget-n-accordion\" data-id=\"412fa06\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;default_state&quot;:&quot;all_collapsed&quot;,&quot;max_items_expended&quot;:&quot;one&quot;,&quot;n_accordion_animation_duration&quot;:{&quot;unit&quot;:&quot;ms&quot;,&quot;size&quot;:400,&quot;sizes&quot;:[]}}\" data-widget_type=\"nested-accordion.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"e-n-accordion\" aria-label=\"Accordion. Open links with Enter or Space, close with Escape, and navigate with Arrow Keys\">\n\t\t\t\t\t\t<details id=\"e-n-accordion-item-6830\" class=\"e-n-accordion-item\" >\n\t\t\t\t<summary class=\"e-n-accordion-item-title\" data-accordion-index=\"1\" tabindex=\"0\" aria-expanded=\"false\" aria-controls=\"e-n-accordion-item-6830\" >\n\t\t\t\t\t<span class='e-n-accordion-item-title-header'><h3 class=\"e-n-accordion-item-title-text\"> Does Protectimus MFA work with NLA (Network Level Authentication)? <\/h3><\/span>\n\t\t\t\t\t\t\t<span class='e-n-accordion-item-title-icon'>\n\t\t\t<span class='e-opened' ><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"24\" height=\"2\" viewBox=\"0 0 24 2\" fill=\"none\"><path d=\"M24 1L5.96046e-08 0.999999\" stroke=\"#111111\" stroke-width=\"2\"><\/path><\/svg><\/span>\n\t\t\t<span class='e-closed'><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"24\" height=\"24\" viewBox=\"0 0 24 24\" fill=\"none\"><path d=\"M12 0V24\" stroke=\"#111111\" stroke-width=\"2\"><\/path><path d=\"M24 12L5.96046e-08 12\" stroke=\"#111111\" stroke-width=\"2\"><\/path><\/svg><\/span>\n\t\t<\/span>\n\n\t\t\t\t\t\t<\/summary>\n\t\t\t\t<div role=\"region\" aria-labelledby=\"e-n-accordion-item-6830\" class=\"elementor-element elementor-element-ea1991a e-con-full e-flex e-con e-child\" data-id=\"ea1991a\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-8bad61c elementor-widget elementor-widget-text-editor\" data-id=\"8bad61c\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">Yes, and NLA should remain enabled. The Protectimus Winlogon Agent integrates at the Windows Credential Provider layer, which is compatible with NLA. Users enter their Windows credentials and OTP as part of the authentication flow before the remote desktop session opens.<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/details>\n\t\t\t\t\t\t<details id=\"e-n-accordion-item-6831\" class=\"e-n-accordion-item\" >\n\t\t\t\t<summary class=\"e-n-accordion-item-title\" data-accordion-index=\"2\" tabindex=\"-1\" aria-expanded=\"false\" aria-controls=\"e-n-accordion-item-6831\" >\n\t\t\t\t\t<span class='e-n-accordion-item-title-header'><h3 class=\"e-n-accordion-item-title-text\"> What happens if the Protectimus server is unavailable? <\/h3><\/span>\n\t\t\t\t\t\t\t<span class='e-n-accordion-item-title-icon'>\n\t\t\t<span class='e-opened' ><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"24\" height=\"2\" viewBox=\"0 0 24 2\" fill=\"none\"><path d=\"M24 1L5.96046e-08 0.999999\" stroke=\"#111111\" stroke-width=\"2\"><\/path><\/svg><\/span>\n\t\t\t<span class='e-closed'><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"24\" height=\"24\" viewBox=\"0 0 24 24\" fill=\"none\"><path d=\"M12 0V24\" stroke=\"#111111\" stroke-width=\"2\"><\/path><path d=\"M24 12L5.96046e-08 12\" stroke=\"#111111\" stroke-width=\"2\"><\/path><\/svg><\/span>\n\t\t<\/span>\n\n\t\t\t\t\t\t<\/summary>\n\t\t\t\t<div role=\"region\" aria-labelledby=\"e-n-accordion-item-6831\" class=\"elementor-element elementor-element-b2bdc68 e-con-full e-flex e-con e-child\" data-id=\"b2bdc68\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-f30747e elementor-widget elementor-widget-text-editor\" data-id=\"f30747e\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">If the Protectimus service or on-premises platform is temporarily unavailable, users cannot complete MFA using standard authentication methods until connectivity is restored.<\/span><\/p><p><span style=\"font-weight: 400;\">For emergency scenarios, Protectimus supports one-time backup codes that can be used instead of an OTP to access protected Windows systems. Backup codes are generated during Winlogon installation, and a new backup code is automatically issued each time the previous one is used. Backup codes should be stored securely as part of the organization&#8217;s business continuity plan.<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/details>\n\t\t\t\t\t\t<details id=\"e-n-accordion-item-6832\" class=\"e-n-accordion-item\" >\n\t\t\t\t<summary class=\"e-n-accordion-item-title\" data-accordion-index=\"3\" tabindex=\"-1\" aria-expanded=\"false\" aria-controls=\"e-n-accordion-item-6832\" >\n\t\t\t\t\t<span class='e-n-accordion-item-title-header'><h3 class=\"e-n-accordion-item-title-text\"> Can I use hardware tokens instead of a smartphone? <\/h3><\/span>\n\t\t\t\t\t\t\t<span class='e-n-accordion-item-title-icon'>\n\t\t\t<span class='e-opened' ><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"24\" height=\"2\" viewBox=\"0 0 24 2\" fill=\"none\"><path d=\"M24 1L5.96046e-08 0.999999\" stroke=\"#111111\" stroke-width=\"2\"><\/path><\/svg><\/span>\n\t\t\t<span class='e-closed'><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"24\" height=\"24\" viewBox=\"0 0 24 24\" fill=\"none\"><path d=\"M12 0V24\" stroke=\"#111111\" stroke-width=\"2\"><\/path><path d=\"M24 12L5.96046e-08 12\" stroke=\"#111111\" stroke-width=\"2\"><\/path><\/svg><\/span>\n\t\t<\/span>\n\n\t\t\t\t\t\t<\/summary>\n\t\t\t\t<div role=\"region\" aria-labelledby=\"e-n-accordion-item-6832\" class=\"elementor-element elementor-element-0787040 e-con-full e-flex e-con e-child\" data-id=\"0787040\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-9eb7aff elementor-widget elementor-widget-text-editor\" data-id=\"9eb7aff\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">Yes. Protectimus supports all OATH-TOTP hardware tokens, including Protectimus TWO, FLEX, SHARK, and Slim NFC. Hardware tokens work in environments where smartphones are prohibited and operate independently of network connectivity.<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/details>\n\t\t\t\t\t\t<details id=\"e-n-accordion-item-6833\" class=\"e-n-accordion-item\" >\n\t\t\t\t<summary class=\"e-n-accordion-item-title\" data-accordion-index=\"4\" tabindex=\"-1\" aria-expanded=\"false\" aria-controls=\"e-n-accordion-item-6833\" >\n\t\t\t\t\t<span class='e-n-accordion-item-title-header'><h3 class=\"e-n-accordion-item-title-text\"> How long does it take to deploy across 50 servers? <\/h3><\/span>\n\t\t\t\t\t\t\t<span class='e-n-accordion-item-title-icon'>\n\t\t\t<span class='e-opened' ><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"24\" height=\"2\" viewBox=\"0 0 24 2\" fill=\"none\"><path d=\"M24 1L5.96046e-08 0.999999\" stroke=\"#111111\" stroke-width=\"2\"><\/path><\/svg><\/span>\n\t\t\t<span class='e-closed'><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"24\" height=\"24\" viewBox=\"0 0 24 24\" fill=\"none\"><path d=\"M12 0V24\" stroke=\"#111111\" stroke-width=\"2\"><\/path><path d=\"M24 12L5.96046e-08 12\" stroke=\"#111111\" stroke-width=\"2\"><\/path><\/svg><\/span>\n\t\t<\/span>\n\n\t\t\t\t\t\t<\/summary>\n\t\t\t\t<div role=\"region\" aria-labelledby=\"e-n-accordion-item-6833\" class=\"elementor-element elementor-element-b3373c0 e-con-full e-flex e-con e-child\" data-id=\"b3373c0\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-6ef49d2 elementor-widget elementor-widget-text-editor\" data-id=\"6ef49d2\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">A scripted or Group Policy deployment across 50 servers typically completes within a single work day. The installer supports silent installation with command-line parameters. User enrollment runs in parallel with the rollout, with users enrolling their authentication methods during their first successful Windows or RDP login.<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/details>\n\t\t\t\t\t\t<details id=\"e-n-accordion-item-6834\" class=\"e-n-accordion-item\" >\n\t\t\t\t<summary class=\"e-n-accordion-item-title\" data-accordion-index=\"5\" tabindex=\"-1\" aria-expanded=\"false\" aria-controls=\"e-n-accordion-item-6834\" >\n\t\t\t\t\t<span class='e-n-accordion-item-title-header'><h3 class=\"e-n-accordion-item-title-text\"> Is there an on-premises option for data residency requirements? <\/h3><\/span>\n\t\t\t\t\t\t\t<span class='e-n-accordion-item-title-icon'>\n\t\t\t<span class='e-opened' ><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"24\" height=\"2\" viewBox=\"0 0 24 2\" fill=\"none\"><path d=\"M24 1L5.96046e-08 0.999999\" stroke=\"#111111\" stroke-width=\"2\"><\/path><\/svg><\/span>\n\t\t\t<span class='e-closed'><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"24\" height=\"24\" viewBox=\"0 0 24 24\" fill=\"none\"><path d=\"M12 0V24\" stroke=\"#111111\" stroke-width=\"2\"><\/path><path d=\"M24 12L5.96046e-08 12\" stroke=\"#111111\" stroke-width=\"2\"><\/path><\/svg><\/span>\n\t\t<\/span>\n\n\t\t\t\t\t\t<\/summary>\n\t\t\t\t<div role=\"region\" aria-labelledby=\"e-n-accordion-item-6834\" class=\"elementor-element elementor-element-3e2c10e e-con-full e-flex e-con e-child\" data-id=\"3e2c10e\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-e1ee304 elementor-widget elementor-widget-text-editor\" data-id=\"e1ee304\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">Yes. The full Protectimus platform can be deployed on your own infrastructure, including Linux, Windows, and FreeBSD environments. All authentication data, logs, and user records remain within your network perimeter while providing the same feature set as the cloud service.<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/details>\n\t\t\t\t\t\t<details id=\"e-n-accordion-item-6835\" class=\"e-n-accordion-item\" >\n\t\t\t\t<summary class=\"e-n-accordion-item-title\" data-accordion-index=\"6\" tabindex=\"-1\" aria-expanded=\"false\" aria-controls=\"e-n-accordion-item-6835\" >\n\t\t\t\t\t<span class='e-n-accordion-item-title-header'><h3 class=\"e-n-accordion-item-title-text\"> What is the difference between MFA for RDP and Winlogon? <\/h3><\/span>\n\t\t\t\t\t\t\t<span class='e-n-accordion-item-title-icon'>\n\t\t\t<span class='e-opened' ><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"24\" height=\"2\" viewBox=\"0 0 24 2\" fill=\"none\"><path d=\"M24 1L5.96046e-08 0.999999\" stroke=\"#111111\" stroke-width=\"2\"><\/path><\/svg><\/span>\n\t\t\t<span class='e-closed'><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"24\" height=\"24\" viewBox=\"0 0 24 24\" fill=\"none\"><path d=\"M12 0V24\" stroke=\"#111111\" stroke-width=\"2\"><\/path><path d=\"M24 12L5.96046e-08 12\" stroke=\"#111111\" stroke-width=\"2\"><\/path><\/svg><\/span>\n\t\t<\/span>\n\n\t\t\t\t\t\t<\/summary>\n\t\t\t\t<div role=\"region\" aria-labelledby=\"e-n-accordion-item-6835\" class=\"elementor-element elementor-element-67bff32 e-con-full e-flex e-con e-child\" data-id=\"67bff32\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-ed5da62 elementor-widget elementor-widget-text-editor\" data-id=\"ed5da62\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">The <\/span><a href=\"https:\/\/www.protectimus.com\/uk\/winlogon\/\"><span style=\"font-weight: 400;\">Protectimus Winlogon component<\/span><\/a><span style=\"font-weight: 400;\"> protects both local Windows logons and Remote Desktop sessions using a single agent. The \/winlogon\/ page covers all supported Windows authentication scenarios. This page focuses specifically on Remote Desktop access, including the RDP threat model, Network Level Authentication (NLA) compatibility, deployment scenarios, and best practices for securing RDP environments. For the full installation guide, see <\/span><a href=\"https:\/\/www.protectimus.com\/uk\/guides\/winlogon-rdp\/\"><span style=\"font-weight: 400;\">MFA for Windows Logon and RDP<\/span><\/a><span style=\"font-weight: 400;\">.<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/details>\n\t\t\t\t\t<\/div>\n\t\t\t\t\t<script type=\"application\/ld+json\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@type\":\"FAQPage\",\"mainEntity\":[{\"@type\":\"Question\",\"name\":\"Does Protectimus MFA work with NLA (Network Level Authentication)?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"Yes, and NLA should remain enabled. The Protectimus Winlogon Agent integrates at the Windows Credential Provider layer, which is compatible with NLA. Users enter their Windows credentials and OTP as part of the authentication flow before the remote desktop session opens.\"}},{\"@type\":\"Question\",\"name\":\"What happens if the Protectimus server is unavailable?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"If the Protectimus service or on-premises platform is temporarily unavailable, users cannot complete MFA using standard authentication methods until connectivity is restored.For emergency scenarios, Protectimus supports one-time backup codes that can be used instead of an OTP to access protected Windows systems. Backup codes are generated during Winlogon installation, and a new backup code is automatically issued each time the previous one is used. Backup codes should be stored securely as part of the organization&#8217;s business continuity plan.\"}},{\"@type\":\"Question\",\"name\":\"Can I use hardware tokens instead of a smartphone?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"Yes. Protectimus supports all OATH-TOTP hardware tokens, including Protectimus TWO, FLEX, SHARK, and Slim NFC. Hardware tokens work in environments where smartphones are prohibited and operate independently of network connectivity.\"}},{\"@type\":\"Question\",\"name\":\"How long does it take to deploy across 50 servers?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"A scripted or Group Policy deployment across 50 servers typically completes within a single work day. The installer supports silent installation with command-line parameters. User enrollment runs in parallel with the rollout, with users enrolling their authentication methods during their first successful Windows or RDP login.\"}},{\"@type\":\"Question\",\"name\":\"Is there an on-premises option for data residency requirements?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"Yes. The full Protectimus platform can be deployed on your own infrastructure, including Linux, Windows, and FreeBSD environments. All authentication data, logs, and user records remain within your network perimeter while providing the same feature set as the cloud service.\"}},{\"@type\":\"Question\",\"name\":\"What is the difference between MFA for RDP and Winlogon?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"The Protectimus Winlogon component protects both local Windows logons and Remote Desktop sessions using a single agent. The \\\/winlogon\\\/ page covers all supported Windows authentication scenarios. This page focuses specifically on Remote Desktop access, including the RDP threat model, Network Level Authentication (NLA) compatibility, deployment scenarios, and best practices for securing RDP environments. For the full installation guide, see MFA for Windows Logon and RDP.\"}}]}<\/script>\n\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-7534fb4 elementor-widget elementor-widget-html\" data-id=\"7534fb4\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"html.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<script type=\"application\/ld+json\">\r\n\r\n{\r\n\r\n  \"@context\": \"https:\/\/schema.org\",\r\n\r\n  \"@type\": \"HowTo\",\r\n\r\n  \"name\": \"How to Add MFA to RDP in 4 Steps\",\r\n\r\n  \"step\": [\r\n\r\n    {\r\n\r\n      \"@type\": \"HowToStep\",\r\n\r\n      \"name\": \"Deploy the Protectimus Authentication Server\",\r\n\r\n      \"text\": \"Choose cloud or on-premises deployment and create a Resource for Winlogon policies.\"\r\n\r\n    },\r\n\r\n    {\r\n\r\n      \"@type\": \"HowToStep\",\r\n\r\n      \"name\": \"Configure Winlogon Access Policies\",\r\n\r\n      \"text\": \"Enable access for local Windows logons and RDP sessions, enable MFA, and configure automatic user and token enrollment.\"\r\n\r\n    },\r\n\r\n    {\r\n\r\n      \"@type\": \"HowToStep\",\r\n\r\n      \"name\": \"Install the Protectimus Winlogon Agent\",\r\n\r\n      \"text\": \"Install the agent on the Windows server and provide the API URL, account login, API key, and Resource ID.\"\r\n\r\n    },\r\n\r\n    {\r\n\r\n      \"@type\": \"HowToStep\",\r\n\r\n      \"name\": \"Enroll Users and Test Authentication\",\r\n\r\n      \"text\": \"Enroll authentication methods, assign hardware tokens if required, and verify both local and RDP logons.\"\r\n\r\n    }\r\n\r\n  ]\r\n\r\n}\r\n\r\n<\/script>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-7fc3a10 padded e-flex e-con-boxed e-con e-parent\" data-id=\"7fc3a10\" data-element_type=\"container\" data-e-type=\"container\" id=\"get-started\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t<div class=\"elementor-element elementor-element-6f3525c e-con-full e-flex e-con e-child\" data-id=\"6f3525c\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-066e744 elementor-widget elementor-widget-heading\" data-id=\"066e744\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Get Started with RDP MFA Today<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-6bda089 elementor-widget elementor-widget-text-editor\" data-id=\"6bda089\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">The Protectimus cloud service includes a free plan for up to 10 users, allowing organizations to validate a complete deployment on a representative server before a broader rollout. New accounts also receive a $25 testing credit for evaluating additional authentication methods. The <\/span><a href=\"https:\/\/www.protectimus.com\/uk\/platform\/\"><span style=\"font-weight: 400;\">on-premises MFA platform<\/span><\/a><span style=\"font-weight: 400;\"> is available for organizations with data residency requirements.<\/span><\/p><p><span style=\"font-weight: 400;\">If your scope extends beyond RDP \u2014 VPN, Windows local logon, ADFS \u2014 the same platform covers all of these from a single admin console. <\/span><a href=\"https:\/\/www.protectimus.com\/uk\/mfa-for-active-directory\/\"><span style=\"font-weight: 400;\">MFA for Active Directory<\/span><\/a><span style=\"font-weight: 400;\"> via the DSPA component and <\/span><a href=\"https:\/\/www.protectimus.com\/uk\/radius\/\"><span style=\"font-weight: 400;\">RADIUS MFA for VPN<\/span><\/a><span style=\"font-weight: 400;\"> are available as part of the broader Protectimus ecosystem.<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-fe2c5b0 padded e-flex e-con-boxed e-con e-parent\" data-id=\"fe2c5b0\" data-element_type=\"container\" data-e-type=\"container\" id=\"conclusion\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t<div class=\"elementor-element elementor-element-e4ec716 e-con-full e-flex e-con e-child\" data-id=\"e4ec716\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t<div class=\"elementor-element elementor-element-35746bf e-con-full e-flex e-con e-child\" data-id=\"35746bf\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t<div class=\"elementor-element elementor-element-489bd70 e-con-full e-flex e-con e-child\" data-id=\"489bd70\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-10cf0aa elementor-widget elementor-widget-heading\" data-id=\"10cf0aa\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Conclusion <\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-6c0eeb4 elementor-widget elementor-widget-text-editor\" data-id=\"6c0eeb4\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">RDP remains the most direct path from the internet into your Windows infrastructure. A stolen password is all an attacker needs to walk through it. A second factor \u2014 a 30-second TOTP code\u00a0 generated by a mobile app or hardware token \u2014 makes that credential worthless on its own.<\/span><\/p><p><span style=\"font-weight: 400;\">The Protectimus Winlogon Agent adds MFA at the Windows Credential Provider layer, protecting both local Windows logons and Remote Desktop sessions while remaining fully compatible with Network Level Authentication (NLA). The solution can be deployed in hours and scaled across large Windows environments using centralized deployment tools.<\/span><\/p><p><strong>For the complete installation walkthrough, see the <a href=\"https:\/\/www.protectimus.com\/uk\/guides\/winlogon-rdp\/\">full step-by-step RDP integration guide<\/a>\u00a0\u2192<\/strong><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-a3f81ec e-con-full contact-us-bg e-flex e-con e-child\" data-id=\"a3f81ec\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t\t<div class=\"elementor-element elementor-element-fb3d121 elementor-widget elementor-widget-shortcode\" data-id=\"fb3d121\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"shortcode.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-shortcode\">\t\t<div data-elementor-type=\"container\" data-elementor-id=\"14849\" class=\"elementor elementor-14849 elementor-3585\" data-elementor-post-type=\"elementor_library\">\n\t\t\t\t<div class=\"elementor-element elementor-element-3a82e0d1 e-con-full e-flex e-con e-child\" data-id=\"3a82e0d1\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t\t<div class=\"elementor-element elementor-element-b4de036 elementor-widget elementor-widget-image\" data-id=\"b4de036\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"370\" height=\"370\" src=\"https:\/\/www.protectimus.com\/wp-content\/uploads\/2024\/05\/contact-seal.svg\" class=\"attachment-full size-full wp-image-5869\" alt=\"Send Us A Message icon\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-1bc85d61 elementor-widget elementor-widget-heading\" data-id=\"1bc85d61\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">\u041d\u0430\u0434\u0456\u0448\u043b\u0456\u0442\u044c \u043d\u0430\u043c \u043f\u043e\u0432\u0456\u0434\u043e\u043c\u043b\u0435\u043d\u043d\u044f<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-cf09046 elementor-widget elementor-widget-shortcode\" data-id=\"cf09046\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"shortcode.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-shortcode\">\n<div class=\"wpcf7 no-js\" id=\"wpcf7-f8427-o1\" lang=\"uk\" dir=\"ltr\" data-wpcf7-id=\"8427\">\n<div class=\"screen-reader-response\"><p role=\"status\" aria-live=\"polite\" aria-atomic=\"true\"><\/p> <ul><\/ul><\/div>\n<form action=\"\/uk\/wp-json\/wp\/v2\/pages\/18084#wpcf7-f8427-o1\" method=\"post\" class=\"wpcf7-form init\" aria-label=\"\u041a\u043e\u043d\u0442\u0430\u043a\u0442\u043d\u0430 \u0444\u043e\u0440\u043c\u0430\" novalidate=\"novalidate\" data-status=\"init\">\n<fieldset class=\"hidden-fields-container\"><input type=\"hidden\" name=\"_wpcf7\" value=\"8427\" \/><input type=\"hidden\" name=\"_wpcf7_version\" value=\"6.1.2\" \/><input type=\"hidden\" name=\"_wpcf7_locale\" value=\"uk\" \/><input type=\"hidden\" name=\"_wpcf7_unit_tag\" value=\"wpcf7-f8427-o1\" \/><input type=\"hidden\" name=\"_wpcf7_container_post\" value=\"0\" \/><input type=\"hidden\" name=\"_wpcf7_posted_data_hash\" value=\"\" \/>\n<\/fieldset>\n<div class=\"protectimus-form\">\n\n<div class=\"row\">\n    <div class=\"col\">\n        <span class=\"wpcf7-form-control-wrap\" data-name=\"uname\"><input size=\"40\" maxlength=\"400\" class=\"wpcf7-form-control wpcf7-text wpcf7-validates-as-required\" aria-required=\"true\" aria-invalid=\"false\" placeholder=\"\u0406\u043c&#039;\u044f\" value=\"\" type=\"text\" name=\"uname\" \/><\/span>\n    <\/div>\n<\/div>\n\n<div class=\"row\">\n    <div class=\"col\">\n        <span class=\"wpcf7-form-control-wrap\" data-name=\"email\"><input size=\"40\" maxlength=\"400\" class=\"wpcf7-form-control wpcf7-email wpcf7-validates-as-required wpcf7-text wpcf7-validates-as-email\" aria-required=\"true\" aria-invalid=\"false\" placeholder=\"\u0415\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u0430 \u043f\u043e\u0448\u0442\u0430\" value=\"\" type=\"email\" name=\"email\" \/><\/span>\n    <\/div>\n<\/div>\n\n<div class=\"row\">\n    <div class=\"col\">\n        <span class=\"wpcf7-form-control-wrap\" data-name=\"subject\"><input size=\"40\" maxlength=\"400\" class=\"wpcf7-form-control wpcf7-text wpcf7-validates-as-required\" aria-required=\"true\" aria-invalid=\"false\" placeholder=\"\u0422\u0435\u043c\u0430\" value=\"\" type=\"text\" name=\"subject\" \/><\/span>\n    <\/div>\n<\/div>\n\n<div class=\"row\">\n    <div class=\"col\">\n        <span class=\"wpcf7-form-control-wrap\" data-name=\"message\"><textarea cols=\"40\" rows=\"1\" maxlength=\"2000\" class=\"wpcf7-form-control wpcf7-textarea wpcf7-validates-as-required\" aria-required=\"true\" aria-invalid=\"false\" placeholder=\"\u041f\u043e\u0432\u0456\u0434\u043e\u043c\u043b\u0435\u043d\u043d\u044f\" name=\"message\"><\/textarea><\/span>\n    <\/div>\n<\/div>\n\n<div class=\"row\">\n    <div class=\"col mb-2\">\n        <input class=\"wpcf7-form-control wpcf7-submit has-spinner\" type=\"submit\" value=\"\u041d\u0430\u0434\u0456\u0441\u043b\u0430\u0442\u0438\" \/>\n    <\/div>\n<\/div>\n\n<\/div><div class=\"wpcf7-response-output\" aria-hidden=\"true\"><\/div>\n<\/form>\n<\/div>\n<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-311ad2c e-grid e-con-full equal-height equal-height-mob e-con e-child\" data-id=\"311ad2c\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t<a target=\"_blank\" target=\"_blank\" class=\"elementor-element elementor-element-feb2bbc e-con-full four-link e-flex e-con e-child\" data-id=\"feb2bbc\" data-element_type=\"container\" data-e-type=\"container\" href=\"https:\/\/service.protectimus.com\/en\/register\">\n\t\t\t\t<div class=\"elementor-element elementor-element-f27e21b eq-height elementor-widget elementor-widget-heading\" data-id=\"f27e21b\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-heading-title elementor-size-default\">Start free trial<\/div>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-76c9612 elementor-widget elementor-widget-image\" data-id=\"76c9612\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"28\" height=\"26\" src=\"https:\/\/www.protectimus.com\/wp-content\/uploads\/2024\/02\/icon-arrow-big.svg\" class=\"attachment-full size-full wp-image-455\" alt=\"Arrow icon\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/a>\n\t\t<a class=\"elementor-element elementor-element-4ccade8 e-con-full four-link e-flex e-con e-child\" data-id=\"4ccade8\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\" href=\"https:\/\/www.protectimus.com\/uk\/contact-us\/\">\n\t\t\t\t<div class=\"elementor-element elementor-element-45ea78d eq-height elementor-widget elementor-widget-heading\" data-id=\"45ea78d\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-heading-title elementor-size-default\">Contact sales<\/div>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-e65f9a1 elementor-widget elementor-widget-image\" data-id=\"e65f9a1\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"28\" height=\"26\" src=\"https:\/\/www.protectimus.com\/wp-content\/uploads\/2024\/02\/icon-arrow-big.svg\" class=\"attachment-full size-full wp-image-455\" alt=\"Arrow icon\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/a>\n\t\t<a class=\"elementor-element elementor-element-c9d4aa4 e-con-full four-link e-flex e-con e-child\" data-id=\"c9d4aa4\" data-element_type=\"container\" data-e-type=\"container\" href=\"https:\/\/www.protectimus.com\/uk\/pricing\/\">\n\t\t\t\t<div class=\"elementor-element elementor-element-b9e4eb6 eq-height elementor-widget elementor-widget-heading\" data-id=\"b9e4eb6\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-heading-title elementor-size-default\">Pricing details<\/div>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-120f334 elementor-widget elementor-widget-image\" data-id=\"120f334\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"28\" height=\"26\" src=\"https:\/\/www.protectimus.com\/wp-content\/uploads\/2024\/02\/icon-arrow-big.svg\" class=\"attachment-full size-full wp-image-455\" alt=\"Arrow icon\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/a>\n\t\t<a class=\"elementor-element elementor-element-e82cb51 e-con-full four-link e-flex e-con e-child\" data-id=\"e82cb51\" data-element_type=\"container\" data-e-type=\"container\" href=\"https:\/\/www.protectimus.com\/uk\/guides\/saas-service\/\">\n\t\t\t\t<div class=\"elementor-element elementor-element-d33e100 eq-height elementor-widget elementor-widget-heading\" data-id=\"d33e100\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-heading-title elementor-size-default\">Integration guides<\/div>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-3de24d6 elementor-widget elementor-widget-image\" data-id=\"3de24d6\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"28\" height=\"26\" src=\"https:\/\/www.protectimus.com\/wp-content\/uploads\/2024\/02\/icon-arrow-big.svg\" class=\"attachment-full size-full wp-image-455\" alt=\"Arrow icon\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/a>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>MFA for RDP: Stop Unauthorized Remote Desktop Access Cold Remote Desktop Protocol (RDP) remains one of the most exploited remote access protocols in enterprise environments. Attackers continuously scan for exposed port 3389, use stolen credentials, and attempt lateral movement through RDP sessions. A password alone is no longer sufficient.Protectimus provides a targeted MFA solution specifically [&hellip;]<\/p>\n","protected":false},"author":5,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"footnotes":""},"class_list":["post-18084","page","type-page","status-publish","hentry"],"acf":[],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO Pro 4.9.10 - aioseo.com -->\n\t<meta name=\"description\" content=\"Add Protectimus MFA to RDP at the Windows Credential Provider level to stop credential-based attacks. Deploy in under 2 hours\u2014get started.\" \/>\n\t<meta name=\"robots\" content=\"noindex, nofollow, max-image-preview:large\" \/>\n\t<meta name=\"google-site-verification\" content=\"6gzGBVioQ9rC9iYw9El7ERlDCLpc9c0ZqgJvbvqk0t4\" \/>\n\t<link rel=\"canonical\" href=\"https:\/\/www.protectimus.com\/uk\/mfa-for-rdp\/\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO Pro (AIOSEO) 4.9.10\" \/>\n\t\t<meta property=\"og:locale\" content=\"uk_UA\" \/>\n\t\t<meta property=\"og:site_name\" content=\"PROTECTIMUS\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"MFA for RDP: Block Unauthorized Remote Access\" \/>\n\t\t<meta property=\"og:description\" content=\"Add Protectimus MFA to RDP at the Windows Credential Provider level to stop credential-based attacks. Deploy in under 2 hours\u2014get started.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/www.protectimus.com\/uk\/mfa-for-rdp\/\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/www.protectimus.com\/wp-content\/uploads\/2024\/02\/protectimus-logo.png\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/www.protectimus.com\/wp-content\/uploads\/2024\/02\/protectimus-logo.png\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2026-06-24T11:51:11+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2026-07-07T13:01:57+00:00\" \/>\n\t\t<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n\t\t<meta name=\"twitter:title\" content=\"MFA for RDP: Block Unauthorized Remote Access\" \/>\n\t\t<meta name=\"twitter:description\" content=\"Add Protectimus MFA to RDP at the Windows Credential Provider level to stop credential-based attacks. Deploy in under 2 hours\u2014get started.\" \/>\n\t\t<meta name=\"twitter:image\" content=\"https:\/\/www.protectimus.com\/wp-content\/uploads\/2024\/02\/protectimus-logo.png\" \/>\n\t\t<meta name=\"twitter:label1\" content=\"\u041d\u0430\u043f\u0438\u0441\u0430\u043d\u043e\" \/>\n\t\t<meta name=\"twitter:data1\" content=\"accounts@vipertop.com\" \/>\n\t\t<meta name=\"twitter:label2\" content=\"\u041f\u0440\u0438\u0431\u043b. \u0447\u0430\u0441 \u0447\u0438\u0442\u0430\u043d\u043d\u044f\" \/>\n\t\t<meta name=\"twitter:data2\" content=\"15 \u0445\u0432\u0438\u043b\u0438\u043d\" \/>\n\t\t<script type=\"application\/ld+json\" class=\"aioseo-schema\">\n\t\t\t{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.protectimus.com\\\/uk\\\/mfa-for-rdp\\\/#breadcrumblist\",\"itemListElement\":[{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.protectimus.com\\\/uk\\\/#listItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.protectimus.com\\\/uk\\\/\",\"nextItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.protectimus.com\\\/uk\\\/mfa-for-rdp\\\/#listItem\",\"name\":\"MFA for RDP: Stop Unauthorized Remote Desktop Access Cold\"}},{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.protectimus.com\\\/uk\\\/mfa-for-rdp\\\/#listItem\",\"position\":2,\"name\":\"MFA for RDP: Stop Unauthorized Remote Desktop Access Cold\",\"previousItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.protectimus.com\\\/uk\\\/#listItem\",\"name\":\"Home\"}}]},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.protectimus.com\\\/uk\\\/#organization\",\"name\":\"Protectimus\",\"description\":\"Two-Factor Authentication Provider\",\"url\":\"https:\\\/\\\/www.protectimus.com\\\/uk\\\/\",\"telephone\":\"+17867966664\",\"logo\":{\"@type\":\"ImageObject\",\"url\":\"https:\\\/\\\/www.protectimus.com\\\/wp-content\\\/uploads\\\/2024\\\/02\\\/logo-icon.svg\",\"@id\":\"https:\\\/\\\/www.protectimus.com\\\/uk\\\/mfa-for-rdp\\\/#organizationLogo\",\"width\":72,\"height\":51,\"caption\":\"Protectimus logo\"},\"image\":{\"@id\":\"https:\\\/\\\/www.protectimus.com\\\/uk\\\/mfa-for-rdp\\\/#organizationLogo\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.protectimus.com\\\/uk\\\/mfa-for-rdp\\\/#webpage\",\"url\":\"https:\\\/\\\/www.protectimus.com\\\/uk\\\/mfa-for-rdp\\\/\",\"name\":\"MFA for RDP: Block Unauthorized Remote Access\",\"description\":\"Add Protectimus MFA to RDP at the Windows Credential Provider level to stop credential-based attacks. Deploy in under 2 hours\\u2014get started.\",\"inLanguage\":\"uk\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.protectimus.com\\\/uk\\\/#website\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.protectimus.com\\\/uk\\\/mfa-for-rdp\\\/#breadcrumblist\"},\"datePublished\":\"2026-06-24T11:51:11+00:00\",\"dateModified\":\"2026-07-07T13:01:57+00:00\"},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.protectimus.com\\\/uk\\\/#website\",\"url\":\"https:\\\/\\\/www.protectimus.com\\\/uk\\\/\",\"name\":\"PROTECTIMUS\",\"inLanguage\":\"uk\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.protectimus.com\\\/uk\\\/#organization\"}}]}\n\t\t<\/script>\n\t\t<!-- All in One SEO Pro -->\r\n\t\t<title>MFA for RDP: Block Unauthorized Remote Access<\/title>\n\n","aioseo_head_json":{"title":"MFA for RDP: Block Unauthorized Remote Access","description":"Add Protectimus MFA to RDP at the Windows Credential Provider level to stop credential-based attacks. Deploy in under 2 hours\u2014get started.","canonical_url":"https:\/\/www.protectimus.com\/uk\/mfa-for-rdp\/","robots":"noindex, nofollow, max-image-preview:large","keywords":"","webmasterTools":{"google-site-verification":"6gzGBVioQ9rC9iYw9El7ERlDCLpc9c0ZqgJvbvqk0t4","miscellaneous":""},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"BreadcrumbList","@id":"https:\/\/www.protectimus.com\/uk\/mfa-for-rdp\/#breadcrumblist","itemListElement":[{"@type":"ListItem","@id":"https:\/\/www.protectimus.com\/uk\/#listItem","position":1,"name":"Home","item":"https:\/\/www.protectimus.com\/uk\/","nextItem":{"@type":"ListItem","@id":"https:\/\/www.protectimus.com\/uk\/mfa-for-rdp\/#listItem","name":"MFA for RDP: Stop Unauthorized Remote Desktop Access Cold"}},{"@type":"ListItem","@id":"https:\/\/www.protectimus.com\/uk\/mfa-for-rdp\/#listItem","position":2,"name":"MFA for RDP: Stop Unauthorized Remote Desktop Access Cold","previousItem":{"@type":"ListItem","@id":"https:\/\/www.protectimus.com\/uk\/#listItem","name":"Home"}}]},{"@type":"Organization","@id":"https:\/\/www.protectimus.com\/uk\/#organization","name":"Protectimus","description":"Two-Factor Authentication Provider","url":"https:\/\/www.protectimus.com\/uk\/","telephone":"+17867966664","logo":{"@type":"ImageObject","url":"https:\/\/www.protectimus.com\/wp-content\/uploads\/2024\/02\/logo-icon.svg","@id":"https:\/\/www.protectimus.com\/uk\/mfa-for-rdp\/#organizationLogo","width":72,"height":51,"caption":"Protectimus logo"},"image":{"@id":"https:\/\/www.protectimus.com\/uk\/mfa-for-rdp\/#organizationLogo"}},{"@type":"WebPage","@id":"https:\/\/www.protectimus.com\/uk\/mfa-for-rdp\/#webpage","url":"https:\/\/www.protectimus.com\/uk\/mfa-for-rdp\/","name":"MFA for RDP: Block Unauthorized Remote Access","description":"Add Protectimus MFA to RDP at the Windows Credential Provider level to stop credential-based attacks. Deploy in under 2 hours\u2014get started.","inLanguage":"uk","isPartOf":{"@id":"https:\/\/www.protectimus.com\/uk\/#website"},"breadcrumb":{"@id":"https:\/\/www.protectimus.com\/uk\/mfa-for-rdp\/#breadcrumblist"},"datePublished":"2026-06-24T11:51:11+00:00","dateModified":"2026-07-07T13:01:57+00:00"},{"@type":"WebSite","@id":"https:\/\/www.protectimus.com\/uk\/#website","url":"https:\/\/www.protectimus.com\/uk\/","name":"PROTECTIMUS","inLanguage":"uk","publisher":{"@id":"https:\/\/www.protectimus.com\/uk\/#organization"}}]},"og:locale":"uk_UA","og:site_name":"PROTECTIMUS","og:type":"article","og:title":"MFA for RDP: Block Unauthorized Remote Access","og:description":"Add Protectimus MFA to RDP at the Windows Credential Provider level to stop credential-based attacks. Deploy in under 2 hours\u2014get started.","og:url":"https:\/\/www.protectimus.com\/uk\/mfa-for-rdp\/","og:image":"https:\/\/www.protectimus.com\/wp-content\/uploads\/2024\/02\/protectimus-logo.png","og:image:secure_url":"https:\/\/www.protectimus.com\/wp-content\/uploads\/2024\/02\/protectimus-logo.png","article:published_time":"2026-06-24T11:51:11+00:00","article:modified_time":"2026-07-07T13:01:57+00:00","twitter:card":"summary_large_image","twitter:title":"MFA for RDP: Block Unauthorized Remote Access","twitter:description":"Add Protectimus MFA to RDP at the Windows Credential Provider level to stop credential-based attacks. Deploy in under 2 hours\u2014get started.","twitter:image":"https:\/\/www.protectimus.com\/wp-content\/uploads\/2024\/02\/protectimus-logo.png","twitter:label1":"\u041d\u0430\u043f\u0438\u0441\u0430\u043d\u043e","twitter:data1":"accounts@vipertop.com","twitter:label2":"\u041f\u0440\u0438\u0431\u043b. \u0447\u0430\u0441 \u0447\u0438\u0442\u0430\u043d\u043d\u044f","twitter:data2":"15 \u0445\u0432\u0438\u043b\u0438\u043d"},"aioseo_meta_data":{"post_id":"18084","title":"MFA for RDP: Block Unauthorized Remote Access","description":"Add Protectimus MFA to RDP at the Windows Credential Provider level to stop credential-based attacks. Deploy in under 2 hours\u2014get started.","keywords":null,"keyphrases":{"focus":{"keyphrase":"","score":0,"analysis":{"keyphraseInTitle":{"score":0,"maxScore":9,"error":1}}},"additional":[]},"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":"","og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"WebPage","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":"-1","robots_max_videopreview":"-1","robots_max_imagepreview":"large","priority":null,"frequency":"default","local_seo":null,"seo_analyzer_scan_date":"2026-07-09 18:15:22","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"open_ai":null,"ai":{"faqs":[],"keyPoints":[],"schemas":[],"titles":[],"descriptions":[],"socialPosts":{"email":[],"linkedin":[],"twitter":[],"facebook":[],"instagram":[]}},"created":"2026-06-24 10:44:31","updated":"2026-07-09 18:15:22"},"aioseo_breadcrumb":"<div class=\"aioseo-breadcrumbs\"><span class=\"aioseo-breadcrumb\">\n\t<a href=\"https:\/\/www.protectimus.com\/uk\/\" title=\"Home\">Home<\/a>\n<\/span><span class=\"aioseo-breadcrumb-separator\">&raquo;<\/span><span class=\"aioseo-breadcrumb\">\n\tMFA for RDP: Stop Unauthorized Remote Desktop Access Cold\n<\/span><\/div>","aioseo_breadcrumb_json":[{"label":"Home","link":"https:\/\/www.protectimus.com\/uk\/"},{"label":"MFA for RDP: Stop Unauthorized Remote Desktop Access Cold","link":"https:\/\/www.protectimus.com\/uk\/mfa-for-rdp\/"}],"_links":{"self":[{"href":"https:\/\/www.protectimus.com\/uk\/wp-json\/wp\/v2\/pages\/18084","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.protectimus.com\/uk\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.protectimus.com\/uk\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.protectimus.com\/uk\/wp-json\/wp\/v2\/users\/5"}],"replies":[{"embeddable":true,"href":"https:\/\/www.protectimus.com\/uk\/wp-json\/wp\/v2\/comments?post=18084"}],"version-history":[{"count":50,"href":"https:\/\/www.protectimus.com\/uk\/wp-json\/wp\/v2\/pages\/18084\/revisions"}],"predecessor-version":[{"id":18222,"href":"https:\/\/www.protectimus.com\/uk\/wp-json\/wp\/v2\/pages\/18084\/revisions\/18222"}],"wp:attachment":[{"href":"https:\/\/www.protectimus.com\/uk\/wp-json\/wp\/v2\/media?parent=18084"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}