https://www.grouppolicy.biz/2015/10/azure-active-directory-group-policy/