Is it possible to run 2FA on Windows Server2022 AD without Azure

Question

Hello there,

is it possible to set up 2FA on Microsoft Server2022 Active Directory without Azure AD or third party solutions?

We want to use Fingerprint as a second security level for signing in on our Windows10 devices.

I came up with gpo

Computer Configuration\Administrative Templates\Windows Components\Windows Hello for Business

Configure device unlock factors

I did put {BEC09223-B018-416D-A0AC-523971B639F5} as first factor.

The devices in the linked ou know shows a message, telling me, that the company did set up ne securtiy rules and that we would need to go to the settings to configure them.

But in settings I have no option to save a fingerprint. It says option currently not available. Further we would like the pcs to force the users to save a fingerprint instead of kindly asking them to do so.