Idk your infra, however AFAIK (been told, haven't looked) that windows can use TPM to determine the node and adfs can use that