do you need to ad join devices for intune to work

Hi I currently have devices joined on prem and managed by gpo and would like to manage them by intune. I think best path is hybrid ad joined.   All users either use VPN or are directly on prem....