You manage a local Active Directory Domain Services environment. Your company purchases a Microsoft 365 Enterprise E1 license for all users. You need to implement self-service password reset. You want to achieve this goal while minimizing costs. Which two actions should you perform?