> Does this actually replace AD and group policy effectively?

I do not know. They probably evaluated the solution before they made the decision.

In any case, continuing to use AD seems out of the question. Relying on US based software in 2025 and beyond is simply not a viable option for any administration that values its sovereignty. The US isn’t even hiding its hostility.