Help with Win11 domain

I inherited a ubiquiti stack and I’m trying to make it work with Win11 AD.

on-site clients work fine. Im having trouble with the vpn side.

Ideally, I’d like the off-site clients to have a seamless experience and just log in with their AD credentials when windows boots on their laptops (whether they happen to be on-site or not)

I’m sure there’s a solution to this, I’m just hitting a wall. Any help would be appreciated!