How to: Enabling MFA for Active Directory Domain Admins with Passwordless Authentication

Very good article and I am interested in testing this out. I do have a question regarding the Kerberos Server Object. Do I need to change the Password Replication Policy to make this work. My concern is possibly exposing Active Directory to attacks from Entra ID.

See this article https://learn.microsoft.com/en-us/windows/security/identity-protection/hello-for-business/deploy/hybrid-cloud-kerberos-trust#unsupported-scenarios