Thanks Obrez, sounds similar to what I want to do but mine is for internal LAN users not VPN. I'm looking for an equivalent to the AD integration that allows group policies to be applied to users after they've logged into a domain account. Seems this isnt available with Azure AD so may have to go down the route of NAC or RADIUS auth.
... View more