---
title: "Creating An MFA Client Policy"
slug: "creating-an-mfa-client-policy"
tags: ["AD Lookup Tool", "Policy Creation", "Policy"]
updated: 2026-01-12T21:59:07Z
published: 2026-01-12T21:59:07Z
canonical: "mfa.rapididentity.com/creating-an-mfa-client-policy"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://mfa.rapididentity.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Creating An MFA Client Policy

It's recommended to install and update the pre-req's on the server directly. Then use the AD Lookup Tool through a remote session. This guarantees that you will be on a domain-joined machine when using the tool.

You can view or edit all your created policies by selecting **View All Policies** in the left-hand pane in the Admin Portal. ![8.png](https://cdn.document360.io/cf888ab6-47bb-4aaa-984b-26a47cdccf46/Images/Documentation/8.png)

Pre-Req's

To utilize the Active Directory Lookup Tool to create a policy, you will need the following:

- The MFA server is domain joined
- [ActiveX settings updated](/v1/docs/activex-settings-for-internet-explorer)
- Client-Side Components installed - the matching version to your MFA server (the download for these can be found in our *Downloads & Release Notes* section)
- If you do not wish to use IE, you can set up [IE Compatibility Mode for Edge](/v1/docs/ie-compatibility-mode-for-edge)

1. In Internet Explorer on the ONE Admin Portal as the *one_sys_admin* user, go to the **Policies** tab.
2. To the right of the look-up box, select the AD Tool. ![1.png](https://cdn.document360.io/cf888ab6-47bb-4aaa-984b-26a47cdccf46/Images/Documentation/1%284%29.png)
3. When the AD Lookup Tool opens, find the OU you want to make the policy for and click **OK**. This example shows selecting a specific computer, just be sure to select only the OU before hitting **OK**. ![3.png](https://cdn.document360.io/cf888ab6-47bb-4aaa-984b-26a47cdccf46/Images/Documentation/3%283%29.png)
4. The window should close out and show the next screen showing the OU’s path. Make sure this is correct and click **Add**. ![4.png](https://cdn.document360.io/cf888ab6-47bb-4aaa-984b-26a47cdccf46/Images/Documentation/4%282%29.png)
5. The policy editing window will come up. Step through each tab and set your client settings as needed. ![5.png](https://cdn.document360.io/cf888ab6-47bb-4aaa-984b-26a47cdccf46/Images/Documentation/5.png)
6. When you’re done editing the policy, click **Save**.
7. The following screen is your new policy in the View format. Your policy is now optimized and will be pulled down by the set OU’s computers at their next server synchronization. ![7.png](https://cdn.document360.io/cf888ab6-47bb-4aaa-984b-26a47cdccf46/Images/Documentation/7.png)

---

## Troubleshooting

If you experience any issues creating a policy or receiving the error "*Please enter a valid distinguished name*", make sure that at least one computer resides in your target OU in AD. ![delete policy c - AD example.png](https://cdn.document360.io/cf888ab6-47bb-4aaa-984b-26a47cdccf46/Images/Documentation/delete%20policy%20c%20-%20AD%20example.png)

⬇️⬇️⬇️

![delete policy b - creating policy example.png](https://cdn.document360.io/cf888ab6-47bb-4aaa-984b-26a47cdccf46/Images/Documentation/delete%20policy%20b%20-%20creating%20policy%20example.png)

#### If you are still experiencing policy creation issues, please reach out to our Support team for further troubleshooting assistance.