Computer Logon MFA for Non-Domain Joined Machines

There may be a requirement to protect a PC that is not joined to the domain.

We have a solution for this.  It is fairly easy to set up, but there are a few extra prerequisites needed in order to get this working

Please note: For initial set up the machine must be connected to the same network even if it is not joined to the domain.

This guide assumes that you have already installed the Computer Logon Agent on your network.  If not, please refer to Computer MFA Logon Agent Setup Guide

• Create Local and Virtual Computer Logon Accounts
• Create a Common Name Identity Attribute
• Create Local Account Logon Policies
• Install Computer Logon Client Software on to the Non-Domain Joined PC
• Manually add the Computer Logon Agent URL
• Add Target Domain NetBios Name
• Testing Computer Logon MFA for Non-Domain Joined Machines