Does AD SSP currently have the ability to restrict which computers or OUs endpoint MFA is enabled on? We currently have a subset of workstations that use a group password, a few different ones in fact that are restricted to certain group of computers. I would like to be able to exclude those systems from MFA while enabling it for the rest of our environment.

Thanks,

 Kenny