Ok, we are looking at ESA and other products as we need something that will force our domain admins to use 2 factor auth when logging into our servers or any machine as a domain admin. The sales guy seemed to imply this would do such a thing.
I've been reading the installation manual and it's not completely clear on some things.
First, can I mark just the admins to have to use ESA.
Second, do I have to install this software on every single PC and server in the domain? It sounds as if we would have to if we want admins to use 2factor whenever they login with admin accounts.