Double user authentication when connecting via RDP?

Question

User identification

There is a server 2008 r2
Managers connect there and work in 1s
The client wants that when a user connects, he (the user) will receive a letter with a one-time code that he enters in the terminal and after that he can work normally

Answer 1

You can use the Nexus Hybrid Access Gateway server. It provides the functionality of an industrial authentication server with various authentication methods (OTP, SMS, certificates, etc.). Once authenticated, you can access Remote Desktop directly from your browser.
In general, nexus HAG fits well into the BYOD concept. Since any device (smartphone, tablet, laptop, PC) after authentication gets access to all provided resources, incl. RDP. And everything works through the browser.