Two-Factor Authentication Built Natively Into Windows Active Directory

AuthLite, LLC, based in Springfield, Illinois, sells a two-factor authentication product for Windows Active Directory networks. It is aimed at organisations that want multi-factor coverage on a budget and without replacing the directory, the applications, or the hardware they already run. Typical buyers are Windows-centric IT teams protecting privileged accounts and remote access, where a full identity platform migration is out of scope but unprotected domain admin credentials are an unacceptable risk.

Rather than bolting a separate authentication server onto the network, AuthLite extends Active Directory itself so the domain understands two-factor state natively and existing software honours it. Tokens can be YubiKeys or OATH devices including Google Authenticator. Because YubiKey supports HMAC-SHA1 challenge-response cryptography, the second factor still works in cached, offline mode, which covers laptops away from a domain controller. Group Policy is used to enforce two-factor requirements across servers and workstations.

Documented use cases include hardening domain administrator accounts against Pass-the-Hash attacks, requiring two factors on Remote Desktop Protocol connections, protecting offline logon on mobile workstations, and gating VPN access through Microsoft RADIUS and LDAP so existing network appliances need no custom integration. The company maintains public versioned documentation, an online store, and a support system. Its position is the low-cost, low-disruption option for Windows shops rather than a broad identity suite.