Can I exclude domain users from Two-Factor Authentication?
Yes. You can disable Two-Factor Authentication for domain users as follows:
Add the domain users to a user group.
Disable Two-Factor Authentication for the user group using the steps described in Disabling Authentication.