带有本地RDS的Azure MFA [英] Azure MFA with onpremise RDS
问题描述
您好，我需要让MFA与我们的本地rds环境2016服务器一起工作.
Hi I have issue with haveing MFA working with our onpremise rds enviroment 2016 server.
我已经安装:
Azure MFA服务器
Azure AD Connect
已配置的基于MFA提供程序身份验证的计费方式
NPSextension已安装在域控制器上
在AD对象上启用了MFA身份验证
Azure MFA server
Azure AD Connect
Configured MFA provider authentication based billing
NPSextension is installed on domain controller
Enabled MFA auth on AD object
现在，当我登录到RDS时登录失败，并且收到2FA的OTP SMS代码.
Now when I login to RDS login fails and I receive a OTP SMS code for 2FA.
此错误是在安装NPS扩展的服务器上生成的:
This error is generated on the server where the NPS extension is installed:
##########################################
###########################################
网络策略服务器拒绝访问用户.
请与网络策略服务器管理员联系以获取更多信息.
用户:
安全ID:mydomain \ test1
帐户名称:mydomain \ test1
帐户域:mydomain
完全合格的帐户名称:mydomain.com/Companies/test1
客户端计算机:
安全ID:NULL SID
帐户名称:PC1
完全合格的帐户名称:-
被叫站标识符:UserAuthType:PW
呼叫站标识符:-
NAS:
NAS IPv4地址:-
NAS IPv6地址:-
NAS标识符:-
NAS端口类型:虚拟
NAS端口:-
RADIUS客户端:
客户友好名称:RDSGateway
客户端IP地址:192.168.100.12
身份验证详细信息:
连接请求策略名称:对所有用户使用Windows身份验证
网络策略名称:RDG_CAP
身份验证提供程序:Windows
身份验证服务器:LAB-DC1.mydomain.com
身份验证类型:扩展
EAP类型:-
帐户会话标识符:-
记录结果:记帐信息已写入本地日志文件.
原因码:21
原因:NPS服务器上安装的NPS扩展动态链接库(DLL)拒绝了连接请求.
Network Policy Server denied access to a user.
Contact the Network Policy Server administrator for more information.
User:
Security ID: mydomain\test1
Account Name: mydomain\test1
Account Domain: mydomain
Fully Qualified Account Name: mydomain.com/Companies/test1
Client Machine:
Security ID: NULL SID
Account Name: PC1
Fully Qualified Account Name: -
Called Station Identifier: UserAuthType:PW
Calling Station Identifier: -
NAS:
NAS IPv4 Address: -
NAS IPv6 Address: -
NAS Identifier: -
NAS Port-Type: Virtual
NAS Port: -
RADIUS Client:
Client Friendly Name: RDSGateway
Client IP Address: 192.168.100.12
Authentication Details:
Connection Request Policy Name: Use Windows authentication for all users
Network Policy Name: RDG_CAP
Authentication Provider: Windows
Authentication Server: LAB-DC1.mydomain.com
Authentication Type: Extension
EAP Type: -
Account Session Identifier: -
Logging Results: Accounting information was written to the local log file.
Reason Code: 21
Reason: An NPS extension dynamic link library (DLL) that is installed on the NPS server rejected the connection request.
############################################## #####
####################################################
推荐答案
Make sure you have configured the setup as described here correctly. You may follow the troubleshoot guide from the same document to resolve the issue. You may also check thread which discusses about similar issue and see if it helps.
----------- -------------------------------------------------- -------------------------
如果此答案有帮助，请单击标记为答案" "或赞".要提供有关您的论坛体验的其他反馈，请单击 此处
这篇关于带有本地RDS的Azure MFA的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！
