Good morning,.....well, it is where I am.
I hope you're all well.
I have a question, is it possible to force Azure MFA for particular on-prem domain accounts? Authentication, i.e. user name and password should still be handled by on-prem DCs. So, on-prem admin accounts must use MFA, standard users do not need MFA.
For the purpose of this, let's imagine that no on-prem/Azure AD integration has yet been done, but the above is the desired outcome.