Well, I think the main issue with Intune is that it does not provide more enough diagnostic data or even a simple line showing what exactly is processing in the admin centre side and it is time consuming to troubleshoot when the remaining 10% of Windows fleet decide not to co-operate.
In my personal experience, as by design, the changes are usually not instant. Especially if the end user are hammering at work and does not lock their screen and sign back in, it falls back to regular check intervals set in Task Scheduler and behaviour is very unpredictable even when the schedule is triggered by how opportunistic it is.
There is no simple feedback interface to admins and, even if you press “sync” on the portal or from the client GUI, it is very opportunistic and you don’t know whether it’s going to go through or not. That lack of information and unpredictability is what frustrates me more than simply saying Intune works 90% of the time or takes 8 hours. Just tell me “oh machine has a pending restart so CSP won’t apply” or “oh yeah too many CSPs pushed in short burst, so Intune needs to wait.” I am happy to wait 8 hours if I see why I need to wait.
There should be a mechanism to stop abuse and spamming the sync button, but if we had a “gpupdate /force” equivalent option in Intune and immediate feedback on what went through or not, I think most admins would immediately fall in live with Intune.