We are running a 2016 Domain with two DC's. AD is synchronised to Microsoft Azure AD. We dont use ADFS. Microsoft AD subscription is just the basic one. We have enabled MFA when logging into O365. Is there a way to enable MFA for local logon accounts. Ideally everyone, but specifically admin accounts?
If this can only be done via third party, what is the best way to go about this?