You have a Microsoft 365 subscription. Each user is assigned a Windows 365 Enterprise license. You need to deploy Cloud PCs that will be Microsoft Entra hybrid joined. What should you do first?

For Microsoft Entra hybrid joined Cloud PCs, an Azure network connection (ANC) is the foundational requirement to establish network connectivity between the Cloud PCs in Azure and your on-premises Active Directory Domain Services environment. This connection enables domain join during provisioning.

A provisioning policy is created after the network connection is established, as it relies on an existing ANC to specify the network for the Cloud PCs.

Configuration profiles are used for managing devices after they are provisioned and enrolled, not as a prerequisite for initial deployment or hybrid join setup.

While a custom image can be used, it is not the *first* step for hybrid join; establishing network connectivity to the on-premises domain is the absolute prerequisite.