Page History

...

First, create a domain-held policy Logon Policy to ensure MFA is required for all users on the StandAlone machine

Section
border true
Column Expand General Authentication and check Enable MFA on local computer logonselect  MFA is required for all users from the drop down, Column width 60% Image Removed Panel borderColor #9EBEE5 bgColor #f0f0f0 borderWidth 1px Image Added

Save the new Logon policy.

It is also recommended to exempt at least one local account from MFA (usually the local administrator account)  just in case there is an issue that prevents the end user from being able to log on, the administrator will still have access without being challenged.

Save the new Computer Logon Client policypolicy.

Now create the offline policies that will be needed once you remove the machine from the network.

Save the new Windows Offline policyComputer Logon Client policy

Create an additional Computer Client Logon Policy which will exempt the Administrator account from MFA logonIt is also recommended to exempt at least one local account from MFA (usually the local administrator account)  just in case there is an issue that prevents the end user from being able to log on, the administrator will still have access without being challenged.

Save the new Computer Logon Client policy

Save the new Logon policy.Windows Offline policy

Create an additional Windows Offline Policy which will exempt the Administrator account from MFA logon.