Windows 11 Intunes Setup

[RIZKI RIVAI]

Hi,We are currently implementing intunes to manage our coorporate devices. All our users are in entra, we dont have onprem AD.In default intunes configuration, when a user enrolled a device they automaticly become local admin on that devices. In traditional join domain world this is something risky and normally we would remove user to become local admin. Now, how do we handle this in intunes? Remove user as local admin or keep them as local admin but enforce some policy restriction ie, disallow for unenroll, disable installing app, etcAnyone can share their experience, pros, cons? Or what is

Continue reading...