Account MFA settings:
All users with network access and email should have MFA enabled in the O365 portal.&nbsp; This does not affect the local AD.
Users with just network access should have MFA disabled, and their account disabled in the O365 portal.&nbsp; This will not block logins to the local AD.

Account MFA settings:

All users with network access and email should have MFA enabled in the O365 portal.  This does not affect the local AD.

Users with just network access should have MFA disabled, and their account disabled in the O365 portal.  This will not block logins to the local AD.

MFA Accounts