How to Add MFA to Windows 11 Professional RDP

Windows 11 Professional provides a secure and efficient Remote Desktop Protocol (RDP) feature that allows you to connect to your computer from a remote location. To enhance the security of your remote connections, it is highly recommended to enable Multi-Factor Authentication (MFA). MFA adds an additional layer of protection by requiring multiple forms of authentication before granting access. In this article, we will guide you through the process of adding MFA to Windows 11 Professional RDP.

Step 1: Enable Remote Desktop

The first step is to enable the Remote Desktop feature on your Windows 11 Professional computer. Follow these steps:

1. Press the Windows key on your keyboard to open the Start menu.
2. Type Settings and click on the Settings app.
3. In the Settings window, click on System.
4. On the left sidebar, click on Remote Desktop.
5. Toggle the Enable Remote Desktop switch to the On position.

Step 2: Install Azure Multi-Factor Authentication

Next, you need to install Azure Multi-Factor Authentication (MFA) on your Windows 11 Professional computer. Follow these steps:

1. Open your preferred web browser and navigate to the Azure Multi-Factor Authentication page.
2. Click on the Get it now button to start the download.
3. Once the download is complete, run the installer and follow the on-screen instructions to install Azure MFA.

Step 3: Configure Azure Multi-Factor Authentication

After installing Azure MFA, you need to configure it to work with your Windows 11 Professional RDP. Follow these steps:

1. Open the Azure MFA application on your computer.
2. Click on the Settings tab.
3. Under the Authentication Methods section, select the desired authentication methods you want to use for MFA. For example, you can choose Phone and Mobile App.
4. Click on the Save button to save your settings.

Step 4: Configure Windows 11 Professional RDP

Now that you have installed and configured Azure MFA, it's time to configure Windows 11 Professional RDP to use MFA. Follow these steps:

1. Press the Windows key on your keyboard to open the Start menu.
2. Type gpedit.msc and click on the gpedit app.
3. In the Group Policy Editor window, navigate to Computer Configuration > Administrative Templates > Windows Components > Remote Desktop Services > Remote Desktop Session Host > Security.
4. Double-click on the Require use of specific security layer for remote (RDP) connections policy.
5. Select the Enabled option.
6. From the Security Layer drop-down menu, select Negotiate.
7. Click on the OK button to save the changes.

Step 5: Test the MFA-enabled RDP

Finally, it's time to test the MFA-enabled RDP on your Windows 11 Professional computer. Follow these steps:

1. Open the Remote Desktop Connection application on your computer.
2. In the Computer field, enter the IP address or hostname of the remote computer you want to connect to.
3. Click on the Show Options button.
4. Click on the Advanced tab.
5. Under the Connect from anywhere section, click on the Settings button.
6. Check the Use my RD Gateway credentials for the remote computer option.
7. Click on the OK button to save the settings.
8. Click on the Connect button to establish the MFA-enabled RDP connection.
9. Follow the on-screen instructions to complete the MFA authentication process.

Congratulations! You have successfully added Multi-Factor Authentication (MFA) to your Windows 11 Professional Remote Desktop Protocol (RDP). Now, your remote connections will be more secure and protected against unauthorized access.

References