Hi I am not sure I am seeing option for Groups that contain devices?

Hi @shashishailaj ,

Thanks for reply. So would I need to disjoin them from my domain? and then re-join them to the Azure AD domain?
I'm just wondering what the ramifications are if they remain joined to our on-prem domain but never again have a line of sight to our on-prem domain controller or VM domain controller through a tunnel.
If they are disjoined will their on-prem AD credentials still serve to be their login via syncing to Azure? And f we have special granular password policies through our third-party software in on-prem Domain Controller we just direct their password reset to connect to VPN?

Hi @shashishailaj
Thanks I really appreciate the feedback. I hate when people don't respond on forums, but we should always remember to respond to the responders as well.
Your information is helpful, and I'm ready to move forward with testing it all out in the real world and seeing what different things we may have to try in our environment.
Regards