After enabling Azure AD Premium P2, you need admin1@contoso.com to be an administrator on every device that is joined to the Azure AD domain. Which Azure AD setting should you configure?

The correct option is Device settings from the Devices blade. Within Azure AD, navigate to Devices Device settings. Here, you can configure "Additional local administrators on all Azure AD joined devices," allowing you to specify users or groups who will be granted local administrator rights on all Azure AD-joined devices. Adding admin1@contoso.com to this setting will achieve the desired outcome. Providers from the MFA Server blade is incorrect because it relates to multi-factor authentication server configurations, not local device administration. User settings from the Users blade is incorrect as it manages individual user properties, not global device administrator roles. General settings from the Groups blade is incorrect because it configures group properties, not local administrator assignments for devices.