Is it possible to synchronize a local AD security group with computer accounts to Azure AD?
A security group synchronizes but the computer accounts which are members in local AD do not.
Device based Office 365 licensing requires that the target workstation is a member of Azure AD group.
For this there are supposed to be two ways to create such group, either a group made in Azure Ad Portal or "On-premises
Active Directory and sync to Azure AD with Azure AD Connect" (https://docs.microsoft.com/en-us/deployoffice/device-based-licensing)
Anyone got this working or got any facts to point that this scenario is not possible?