We have established that 80% of users can use pure AAD/Intune managed devices, and if you can do that, it's much easier to manage (hybrid anything introduces complexity). The trouble is we still have 20% that need to be AD joined, so we still have to worry about deploying devices joined to AD, GPO settings clashing with MDM settings, devices reverting to ConfigMgr management. And because Hybrid AD Join is so unreliable, we have to remove devices from Autopilot if we want to AD join them. Advice on how to progress?