Your network contains an on-premises Active Directory domain named contoso.com that syncs to an Azure Active Directory (Azure AD) tenant.
You have an Azure Virtual Desktop host pool named Pool1 that has the following settings:
Host pool name: Pool1
Host pool type: Personal
Load balancing algorithm: Breadth-first
Number of VMs: 3
The session hosts have the following configurations:
Image used to create the virtual machines: Windows 10 Enterprise
Virtual machines domain-joined to: On-premises contoso.com domain
You need to ensure that you can use Microsoft EndPoint Manager to manage security update on the session hosts.
What should you do?