Jump into modern managed devices with Azure AD Join

Are there any plans to be able to manage a server in AAD? Ex: We in the process of migrating our devices to AAD only (even though we have a hybrid AAD environment). How can I secure a file server WITHOUT needing to join the device to the local AD domain? We are using the Azure Active Directory connect for SSO to access the file server shares, but found I need the local domain policies to manage the server. So the workstations are only AAD joined, but the file server is Hybrid AAD joined.