If enabled, permits device access if unable to contact the Duo service, or any communication errors occur. If disabled, users cannot logon to Windows unless they have Internet access at the logon screen and can contact the Duo service.
Default: Enabled.
| Registry Hive | HKEY_LOCAL_MACHINE |
| Registry Path | SOFTWARE\Policies\Duo Security\DuoCredProv |
| Value Name | FailOpen |
| Value Type | REG_DWORD |
| Enabled Value | 1 |
| Disabled Value | 0 |