You have a hybrid Azure Active Directory (Azure AD) tenant.

You plan to deploy an Azure Virtual Desktop personal host pool. The host pool will contain 15 virtual machines that run Windows 10 Enterprise. The virtual machines will be joined to the on-premises Active Directory domain and used by the members of a domain group named Department1.

You need to ensure that each user is added automatically to the local Administrators group on the virtual machine to which the user signs in.

What should you configure?