2 factor on Windows Admin account in Active Directory

I'm looking for at solution where we can protect our domain admin accounts in our local active directory. In the "old days", there were smart cards, but isn't there a more modern solution that works like 365 MFA, so that no matter where a Domain Admin account logs on to a computer in AD, it will be promted for 2 factor auth.

Does anyone use smart cards today?