@tolad_ Which is right but if you are not having the monitors on your table or in your direct view, proctor should be fine
They have control of camera and mic
@IAMERICAbooted I think some orgs are reevaluating and going back to foundation to sort AD out but we have small number of people with expert know of on prem AD services available
@dammide It depends on the config of the domain and the networking. In most orgs, its really easy to get domain admin then move anywhere. On-prem could work fine. So can VMs. It all depends on the overall conf8g of everything, right? There's a ton of variables
@IAMERICAbooted What if the device is enrolled on prem only and not synced to cloud directory
That will be the ideal option to avoid any policy or token sync to entra
@dammide Again, security and compliance are different. PIM is not a security control and never will be until M$ fixes the token implementation problem which they probably wont because of thr impact to the world.