Hello 

I am trying to implement Multi factor Authentication on AD, So that if a person login to a machine after giving the credentials, he must authenticate from his mobile device to access that machine. I have done through Azure but it's applicable only on office (for example if a person login to portal then only MFA is working). How can i implement on my AD so to be applicable on machine to a domain user. Any help if anyone knows the solution.

thanks 

roshan