Multifactor Solution for Transient Employees Using Shared Computers

[fsoltero]

Does Anyone know of a multifactor solution I can deploy to authenticate transient employees to a share computer. Not everyone will have a mobile phone so a phone authenticator wont work, and I would rather not have a box of RSA fobs laying around in a manager's office.

[denbesten]

Windows Hello for Business is considered multi-factor if the computer has a TPM ("Are" your face; "Have" the computer since Hello only works at the console) .  With that, you could buy one Infrared camera or one fingerprint reader to keep with the shared computer. 

[Leandave]

biometric keyboard?

[fsoltero]

Great idea thank you!

[fsoltero]

Hmm maybe something to think about.

[thaprince1]

FIDO2 Security Keys, support multiple authentication protocols.