MFA - Endpoint protection
Get email alerts when an admin turns off the MFA on an account. Flagg up non MFA accounts in the alerts dashboard and allow an exception for the Sophos AD sync tool.
Yes, allow exclusion for MFA -> Sophos AD Sync utility user cannot use MFA. Because of this, ALL admins need to be assigned to the MFA list manually