How do i secure server login with additional layer of 2fa layer? what are the native options? how do i configure them?

Hello Experts,

I am looking for a solution to secure RDP connections to server with an additional layer of 2FA. something like, smart cards (virtual) or azure MFA etc. but instead of enabling users for multi factor authentication, i am looking for solution when user rdp any server they should be sent a otp or should be asked to enter code from ms authenticator or google autheticator like application to gain access to server. 

or combination of random code + somecode (something like RSA but we dont want to go for hardware based solution or third party which involves cost)

What options do I have? 

Thank you so much !!

Thank you