How to configure GPO in bastion forest to make more hardening?

Question

Hi,

I am looking for GPO configuration in bastion forest to make it more secure.

I am following the below ms article. Here in the section crate privileged access account and elevate users access, can we use any kind of GPO to make the bastion forest privileged accounts more secure? if yes, please provide the configuration steps and how to test it.

https://learn.microsoft.com/en-us/microsoft-identity-manager/pam/configuring-mim-environment-for-pam