80-120 workstations, <12 servers, what does your domain mgmt look like?

We have an Exchange online plan and enrolled everyone with MS Authenticator for MFA. However our AD mgmt is still on premises. Would prefer to stay on premises for AD Mgmt but what is everyone doing these days? We're still on Win10s, Win16 servers with a couple of new Win19 data center servers taking over applications servers we used to run on Vmware.

authenticator cybersecurity doing domain exchange exchange online mfa on premises servers what is workstations