[GekkePrutser]

In which way?

I work in EMM (though not Windows) and we are rapidly moving to Intune/Azure AD now because of this change. Onboarding new machines has become a nightmare when people can't go to the office.

The problem is a catch-22.. We require a 'trusted' machine to connect to the VPN. Yet the VPN is required to connect to AD and bind it, which is the de-facto way it becomes trusted.

Before someone in the office would do this but in many cases this hasn't been possible since COVID so it's exposed the issues with this approach. But even before that, working from home has been causing a lot of friction.

Everyone is moving to EMM models now, like Google Beyondcorp. MS is pushing Intune now as main management, with 'comanagement' with AD for the time being because it doesn't have the same scope of functionality yet. But it's clear that their long-term plan is to abandon it.

[hackerfromthefu]

Thank you now it makes sense to me.