

This setting must be enabled, as well the user needs to login once before the machine is taken offline.

Note: Enabling "Allow Offline Access" will allow the admit to setup the ability for the user to login with no internet connection. You can also Edit the Windows Logon section of the agent and select Allow Override Group choose the group you would to use. This group allows users to be excluded from using 2FA when logging a machine using this configuration. This is local security group in the Directory Manager. Note: You will need to manually create the Passly Override Group. Note: It is recommend that you set an Override Password for all installs.

Note: 'Enforce 2FA on RDP Only' is not supported on versions of Windows earlier than Windows 8 and Windows Server 2012.
