Enable Multi-Factor Authentication for Windows Login (when the Agent is not Joined to a Zone)
Use this policy to enable multi-factor authentication for Windows login when the agent is not joined to a zone.
If this policy is set to Disabled or Not configured, the default is that no user is required to use multi-factor authentication to log in.