There has been a requirement that laptops may be used in remote locations by contractors, therefore for security reasons these will not necessarily be bound to the domain, and they will not have access to the network when used in remote locations, however 2fa logon will still be required to all local accounts with the exception of the the local administrator account.