This is suitable for organisations where Windows 10/11 devices can be deployed and managed in the NHSmail Intune but need to remain domain-joined with a local Active Directory.