Here, is the trick. You don't. MacOS is not Windows, and macOS cannot be Managed by tools designed to manage Microsoft Windows. I also very strongly suggest reconsidering domain binding Macs.
Group Policy - GPO is a Microsoft tool to manage Windows. This will never work, macOS simply does not support GPO nor does GPO support any OS other than Windows. Look in to JAMF Confirmation Profiles that implement similar management as your GPO configurations.
Patching - Depending on what you mean by patching. Application patching, there is as section in JAMF called patch management. Use Patch Management, or manually build Policies and Groups to deploy applications. OS patching, there are fundamental differences in how Microsoft and Apple approach patching.
SCCM - SCCM does not support macOS and has not supported macOS in years. You can look at Intune, but Intune is another MDM like JAMF just no where near as good.
Password Sync with AD - Look in to tools like NoMad, JAMF Connect, or Apples SSO Extension. JAMF Connect would be a good option if you need federated login and a more "Active Directory" like experience.
User & Machine certificate - You need to figure out what kind of certificates you need. SCEP certificates can be deployed directly from JAMF with a configuration profile. If you are needing AD CS certificates, look in to JAMFs AD CS Connector (does not require domain binding). Most any other certificate can be manually uploaded in to a configuration profile and deployed. For domain bound Macs (again I recommend against doing this) you can use the certificate payload in a configuration profile to deploy AD CS certificates.
TL;DR:
My recommendation is to look in to how to Control the Mac like a Mac. Active Directory and Macs do not give you the same results as Active Directory and Windows. In fact Active Directory and Macs actually causes a lot of problems with macOS.
- Rule one in learning to manage Macs in any environment, Windows ≠ MacOS. Window and macOS need two totally different approaches in management and tools normally do not cover both Windows and macOS.
