Hello, I'm curious if MSFT is looking to use Intune to manage Security Baseline Policy for both cloud as well as hybrid joined clients? Is this idea on the road map? As far as I know there are a lot of DNS domain type policy settings that were left out and not available from within an Intune Security Baseline or Intune Configuration Profile, and MSFT did this on purpose. Over time though we've seen a lot of new settings being added to Intune. Is it the intent that we will continue to use GPOs to manage MSFT Security Baseline settings for Hybrid joined devices? Thanks, Ed