ESET products are all excellent, today I’m giving a shout to ESA – a system which provides two factor authentication (2FA) for a whole number of applications, including windows logins and remote desktops. From a server console one can administer a network, for example, such that users can only login in with a second factor in addition to their passwords. The second factor is sent to to the user in a number of possible ways, we use mobile phone push approvals and this works well.
A note on usage, it is easy to disable the 2FA on a device, for example of someone goes on holiday and getting push approvals on their mobile would then be a pain. Look in the portal, under components, select the device and change the setting to “disable 2FA”. Don’t forget to change it back upon the person’s return!