Windows

DualShield for Windows Desktop is a complete solution that reinforces the Windows desktop logon with multi-factor authentication.

DualShield for Windows Desktop helps enterprise customers ensure that workstation and network resources are accessible only by authorized users, whether working locally inside the firewall or remotely via remote desktop. Once fully implemented and enforced, only users who have been issued a two-factor authentication tokens will be able to gain access to the protected Windows desktop and network resources.

Key Features

• Easy to Integrate

  DualShield for Windows Desktop can be easily integrated into the customer’s existing Windows network infrastructure without the requirement of any modification. The entire process of installation and integration can be completed within just hours instead of days.

• Staged Migration

  DualShield for Windows Desktop supports the concurrent use of both Windows AD password authentication and strong two-factor authentication for different users within the domain. The requirement for multi-factor authentication is controlled by a set of polices which can be applied to users, AD groups and OUs. This enables a staged, non-interruptive migration of users to strong authentication when convenient & appropriate.

• Native AD integration

  DualShield delivers true native LDAP support for direct integration with Active Direcotry servers. Native AD support does not require change to the database schema, does not require import from the database and does not require synchronization. Any changes made to the Active Directory are immediately effective in DualShield in real time.

• Offline Logon

  DualShield for Windows Desktop provides multi-factor authentcation even when the desktop machine is offline, disconnected from its Windows network. The offline logon feature allows users to logon into their machines using their domain profiles when the machine is offline, with two-factor authentication, providing both convenience and security.

• Logon Anywhere

  The unique Logon Anywhere feature provided by DualShield enables users to be online authenticated with two-factor authentication while they are offline logging onto their laptop or desktop machines (disconnected from their corporate networks). Basically, users can logon offline but authenticate online anywhere at anytime!

• Versatile Authentication Choices

  DualShield for Windows Desktop supports all authentication methods that are supported by the DualShield platform. These include:

  • On-Demand Password
  • One-Time Password
  • Out-of-Band Push

  • Computer Finerprint
  • USB Flash Drive
  • Smartcard Certificate

  • Keystroke Dynamics
  • Voice Recognition
  • Face Recognition

• Flexible Policies

  DualShield provides a set of authentication and access control policies that enable granular administrative access control down to a user, machine, group or unit. For instance, in a circumstance where a user or machine needs to be exempted from two-factor authentication, the network administrator can put the user or machine in the exception list.

Supported OS

DualShield for Windows Desktop supports all versions of Windows desktop, including Windows 7/8/10 as well as Windows servers including Windows 2008/2010/2012/2016.