DannyH365 , Ulrik Andreassen ...interesting to hear this did not work for you. I usually have at least one (or more) admin accounts (that don't need productivity software) with EM+S licenses, so I haven't run into this limitation (because my tenant has AAD P1 or even P2). But, according to the https://docs.microsoft.com/en-us/office365/servicedescriptions/microsoft-365-service-descriptions/microsoft-365-business-service-description, Azure MFA should be included. And with the hybrid support that was announced earlier this year, I would think, should include the ability to secure your on-premises RDS instance using the NPS extension. Ashanka Iddya, is it mistake on the service description (to include Azure MFA) or is there something amiss on the technical side?