Compliance Settings are a very useful and helpful server feature, thanks to which, ConfigMgr server administrators know exactly whether all of the computers are aligned with company requirements and whether all the users got the required configurations.

All you need to do for managing is to create a collection containing certain computers or users and associate appropriate settings for the collections.

Keep in mind that a computer with the ConfigMgr client installed can be managed by the ConfigMgr server, regardless of whether it is in LAN network or\on the internet. A lot of these settings can be configured using GPO. However, GPO configuration will only be applied if the computer is in the LAN network with a connection to the domain controller. If the computer is managed by the ConfigMgr server, only a connection to the management point is needed.