I'm looking for at solution where we can protect our domain admin accounts in our local active directory. In the "old days", there were smart cards, but isn't there a more modern solution that works like 365 MFA, so that no matter where a Domain Admin account logs on to a computer in AD, it will be promted for 2 factor auth.
Does anyone use smart cards today?