We want to completely get rid of our on-premise infrastructure.
We would like our employees to have a company laptop at home that could authenticate to the AAD DS and be managed by our IT staff through GPOs/Intune.
The documentation I see always suppose there is an on-prem AD to synch with when using AAD DS. This would not be our case. We would like the machines to join the AAD DS domain and be managed from there without any on-prem DC.
Would that work or there are some limitations in using only AAD DS in this scenario?