Contoso is deploying 500 new Windows 11 laptops using Windows Autopilot. The company still relies on several line-of-business applications that authenticate using Kerberos against on-premises Active Directory domain controllers, and IT wants these devices manageable through Group Policy during a transition period. Devices must also enroll in Intune automatically. Which Autopilot deployment profile join type should you configure?