If you want to exclude internal computers from MFA, then you can use the feature called "IP filter" in the DualShield Windows Logon Manager:
You can specify a single IP or a range of IP addresses.
All computers in the IP Filter list will be excluded from MFA