Defender for Endpoints - Domain Controllers

Hi

What is the correct process for managing and deploying policies for  Windows server 2019 domain controllers.

I know that  Security settings management doesn't work on and isn't supported on 2019 DCs as per  (https://learn.microsoft.com/en-us/mem/intune/protect/mde-security-integration?view=o365-worldwide#configure-your-tenant-to-support-microsoft-defender-for-endpoint-security-configuration-management

So how do I manage and get policies to a 2019 DC

Thanks