Can I exclude domain users from Two-Factor Authentication?
Yes. You can disable two-factor authentication (which is a form of multi-factor authentication) for domain users as follows:
- 
Add the domain users to a user group. 
- 
Disable two-factor authentication for the user group. For instructions, see Disabling Two-Factor Authentication.