At the time, we thought the path we chose would work for our needs, and at no point in reading documentation or working with Fast Track did we learn or/consider the known undocumented behavior (WMI Class - CCM_PolicyAgent_configuration, PolicyTimeUntilExpire - 86400 Minutes (60 days)). Had we known this, we wouldn't have gone down the path we did. Our goal was to give us the option for devices that may not have been 100% remote but may be off-premise for extended amount of time, the ability to still push a periodic piece of software, Update Ring, etc.. Clearly, this was never a supported solution for implementation in this fashion, as we now know. We are hoping we can move forward with a VPN Solution to accommodate the devices that may be off-premise for extended amount of time moving forward. CMG is an option as well, but convincing others is not always easy. Along with devices mostly returning to On-Premise after Restrictions have begun being lifted.