Any suggestions?Īnd my second question is, does AzureAD provide group policy as well? We considered going with cloud-hosted GP but so far I've only found a few third-party options, PolicyPak appearing to be the frontrunner but not having SMB friendly pricing with their 100 computer minimum which took that option off the table(unless we can get all of the sites for this client covered which will take time assuming we get them to approve the purchase). I thought that turning off the firewall and disabling its service would do the trick, but I'm reading that this can cause windows update to stop working.which makes absolutely no sense but also wouldn't surprise me. We need to permanently disable the windows firewalls on our supported machines at at least one site, but I'm not sure of the best way to do this where windows update won't just turn them back on. Have a client with several remote locations, no domain/DC, and on networks that we don't support(state-owned and administrated network/firewall).
