https://www.pcisecuritystandards.org/pdfs/PCI_DSS_3.2_Press_Release.pdf
Requires two factor auth for all administrative access, not just remote access. Cashiers should be exempt, but store managers would need to use Duo.
Jon