I've done some testing with a virtual machine and also attaching my tablet to the company AD: after some restart and trial to apply the Group Policy, it seems that something was working using the VPN with my account (never used the domain admin in VPN); however, there are things that I don't understand so well so I can replicate the procedure at all; where I can find on doc.microsoft.com documentation about the Group Policy in Windows Server 2016: I tried to do a research but without luck.