Multifactor Authentication and Run As

Introduction

Welcome to the Multifactor Authentication and Run As Practice Lab. In this module, you will be provided with the instructions and devices needed to develop your hands-on skills.

Learning Outcomes

In this module, you will complete the following exercises:

• Exercise 1. Enabling Multifactor Authentication
• Exercise 2. Configuring Run As to Perform Administrative Tasks

After completing this lab, you will be able to:

• Enable smart card logon
• Verify smart card logon capability
• Move a computer to another OU
• Edit the local policy to enable Run as a different user
• Verify availability of the Run as different user policy
• Create a policy to disable secondary logon
• Test the secondary logon functionality

Exam Objectives

The following exam objective is covered in this lab:

• 6.4 Compare and contrast authentication, authorization, accounting, and non-repudiation concepts

Lab Duration

It will take approximately 1 hour to complete this lab.

Exercise 1 - Enable Multifactor Authentication

Authentication is the process of identifying an individual based information entered during the sign-in process. There are two types of authentication methods: single factor authentication and two-factor authentication (sometimes called multifactor authentication).

Learning Outcomes

After completing this exercise, you will be able to:

• Enable smart card logon
• Verify smart card logon capability

Exercise 2 - Perform Administrative Tasks with Run As

The Run As feature is built into Windows as a convenience for the Administrators and domain network users to launch a program or install an application without signing out of their current logon session. The Run As feature has been used for years in earlier Windows OS and has been carried over to the latest version.

Learning Outcomes

After completing this exercise, you will be able to:

• Move a computer to another OU
• Edit the local policy to enable Run as a Different User option
• Verify availability of the Run as Different User policy
• Create a policy to disable secondary logon
• Test the secondary logon functionality