Windows Hello for Business - Trusted Signals

Been working on configuring Windows Hello and our security team has advised us to use multi-factor unlock. I've figured out how to allow Bluetooth to work with connected phones, but I am interested in the ipconfig setup to allow users to have their second unlock method be our two dns servers and dns suffix. I'm following the example Microsoft gave on their learn page, with our dns server and dns suffix changed to reflect our internal stuff.

<rule schemaVersion="1.0"> <signal type="ipConfig">

<ipv4Prefix>10.10.10.0/24</ipv4Prefix>

<ipv4DnsServer>10.10.0.1</ipv4DnsServer>

<ipv4DnsServer>10.10.0.2</ipv4DnsServer>

<dnsSuffix>corp.contoso.com</dnsSuffix>

</signal> </rule>

Only difference in mine is i did not include an ipv4Prefix. For context as well our devices are hybrid joined, I know that affects using TAP to sign-in, so not sure if that'd affect this.