I have a bunch of machines configured in Azure that use AAD to login. As they currently only require Username and Password I feel that they are at risk. If a user logs in on the web then they are prompted for two factor, but not if they login with the same account to a desktop.
How do I require two factor for RDP/terminal login to any computer joined to my AAD domain?
Just to be clear:
- I have no on-premises Active Directory (and don't want)
- I have no on-premises infrastructure (and don't want)