[user reply partially edited by admin]

See pg 55-57 of MFA Agent GPO guide-"Specify Which Users to Challenge with Additional Authentication"

That setting then allows you the ability to do it 2 different ways-

Challenge against a specific group.

Challenge all users, except those in a exception group.

@johnneset (Customer)​ ,

We are always working to improve our products. Thank you so much for recognizing the hard work of our development teams.

Also, thank you so much for providing the GPO information to @SugunaRavichand (Customer)​ . Much appreciated 😊