Azure Active Directory Domain Service

Question

We have installed Windows 10 multisession VM and domain joined with Azure active directory domain services. Now we want to have some custom restrictions using GPO. However we don't have a legacy Domain controller but we want the Azure Active directory domain service to do this job. How to achieve this

Install Group Policy Management tools, it is asking to do it on a Server VM. We don't have one.
we have Just WVD windows 10 multi session joined with Azure Active directory Domain Services

We don't want to intsall/use a full WVD just for a Domain controller. That is why we chose Azure Active Directory Domain Services. Hope I am making sense. Please help

Answer 1

Something here may help.
https://techcommunity.microsoft.com/t5/itops-talk-blog/what-s-the-difference-between-group-policy-and-azure-policy/ba-p/1016312

--please don't forget to Accept as answer if the reply is helpful--

Answer 2

It's possible to add the RSAT tools in Windows 10:

Windows 10 -> Settings -> Apps -> Optional features

"Add feature" and search for "RSAT: Group" (without the quotes):

----------

(If the reply was helpful please don't forget to upvote and/or accept as answer, thank you)

Regards
Andreas Baumgarten

Answer 3

You must be having 2 DCs from Azure AD DS (Microsoft given). You just need to install RSAT to connect the server to manage the Group Policy or any other tools..

Hope this helps.!