MAR allows machine and user authentications to be correlated. For MAR to work, you need to use "WasMachineAuthenticated" authorization condition to enforce user network access to only when they are on machine that has been authenticate (ie. domain computer). If you do not have such requirement, there is nothing you need to do. You don't really need to disable MAR.