https://www.grouppolicy.biz/2016/05/new-enhancements-to-azuread-domain-services/