Does Rublon MFA support Active Directory Protected Users?

Yes, Rublon MFA supports Active Directory Protected Users. Rublon enables MFA for Active Directory Protected Users Security Group using the Rublon MFA for Windows Logon and RDP connector.

What is a Protected Users Security Group?

Protected Users Security Group is a default group created in Windows Server with the Domain Services role installed, which is located in the "Users" folder in AD Users and Computers. The group itself cannot be configured and has certain security policies imposed in advance. All you need to do is add a given user to this group and all security policies included in AD Protected Users will immediately affect them. Protected Users Group completely disables NTLM authentication and replaces it with a full Kerberos system.

Helpful Links

Rublon MFA for Windows Logon and RDP - Documentation

Protected Users Security Group - Microsoft