On-premises Active Directory contoso.com syncs to Azure AD. Host pool Pool1 is Personal with 3 VMs running Windows 10 Enterprise and joined to the on-prem contoso.com domain. To manage security updates on the session hosts with Microsoft Endpoint Manager, what should you do?

To manage Windows 10 Enterprise session hosts with Microsoft Endpoint Manager (Intune), the devices must be either Azure AD joined or hybrid Azure AD joined. Since the VMs are already joined to the on-premises Active Directory domain, configuring them as hybrid Azure AD joined is the necessary step to enable co-management with Endpoint Manager. This allows you to leverage Intune for security updates and other device management tasks. Changing the host pool type to Pooled or altering the load balancing algorithm (Depth-first or Breadth-first) relates to user session distribution and host pool scaling, not to device management capabilities with Endpoint Manager. Creating Windows 10 Enterprise multi-session images is relevant for pooled host pools to optimize resource usage, but it doesn't address the requirement of managing existing personal session hosts via Endpoint Manager.