@Eli Ofek 

Yes, I have talked about AATP, but it's a licensing thing at the moment. It may be relevant in the future.


Can you clarify what is supported in AATP? Do you mean running the Azure ATP Sensor service with a gMSA, instead of adding a Directory Services user account in the AATP Configuration?