MFA for Windows AD Authentication

Hi all, I'm looking for a product that can integrate MFA into plain old uname/password windows authentication. Ideally, this should work very well where the device cannot contact AD or when completely disconnected from the internet.

What products have you used, what do you recommend, any pitfalls to consider when going down this path?

ad authentication cybersecurity mfa windows