Enforcing Multi-Factor Authentication for a workgroup