UserLock Frequently Asked Questions
Can I apply MFA for users who are outside the local network?
Yes, you can require MFA for users logging on to a domain machine, even when the machine is not connected to the local network.
This requires that the user has already enrolled with MFA and authenticated with MFA on that machine. Note that users cannot enroll with MFA on a machine that is not connected to the local network.
For more details on this feature and how to configure it, see here in the section “Logons without network connection”.