We have 2016 RDS servers for our external users and we are looking to introduce some sort of 2 factor auth for access.

Is there any sort of native solution from Microsoft for this, or am I going to need to implement some sort of 3rd party product such as DUO etc.

Thanks.

3 Spice ups

Duo or TruGrid are my go-tos for this.

1 Spice up

You can use smart cards and pins.

SonicWall SMA 200 (secure mobile access) for two factor, works great

Azure 2FA integrates to you AD and uses the push Application to make it easy to use