Good MFA solution for SMB
Rating: 8 out of 10
IncentivizedUse Cases and Deployment Scope
We use UserLock to implement MFA by default for all administrator accounts, remote webmail access and sporadic Windows access such as remote desktop and off network laptop useage. It's also really useful to run logon reports and to discover access times for PCs by users.
Pros
- Easy to setup and install for the most part
- Easy to onboard users
- Logging and reporting of user's access to devices really good
Cons
- Implementing the agent in IIS scenarios could be easier and more guided
- IIS upgrade agent upgrade process could be improved upon
- An overall summary of applied permssions for a particular user would be useful
Likelihood to Recommend
UserLock is well suited to easily managing MFA for users of various levels to improve security hardening in a granular manner. It's open ended implementation of the IIS module is good for web authentication of all sorts of sites. Reporting of user's access and notifying of multiple logons is great.