我不确定关于条件策略方面，但是如果用户登录到https://portal.azure.com，那么如果在他的帐户上强制执行，则会提示他设置MFA。 这可能是一种解决方法吗？

I'm unsure about the conditional policy side, however if the user logs into https://portal.azure.com then that will prompt for him to set up MFA if it is enforced on his account.  That may be a workaround?

如果您需要MFA用于VDI环境，则需要在访问它之前进行设置 - 使用Azure门户网站是设置此功能的好方法。  不要忘记新用户需要在首次登录时重置密码，这样他们就可以通过一次性登录Azure来同时执行
。

If you require MFA for the VDI environment then this will need setting up prior to accessing it - using the Azure portal is a good way to get this set up.  Dont forget a new user needs to reset their password at first login anyway so they can do both by logging into Azure as a one off.

谢谢，

马特