Restrict users to rename pc

I stumbled across this post as I realized the same with one of my users.
It was an Autopilot device and we set standard user in the deployment profile.
But he really renamed the device via the settings app, it showed renamed in Intune (while rename in Company Portal is just there).

It turned out that the timeframe from importing the hash until the deployment profile was assigned was longer than user started OOBE. In Intune the deployment profile name was missing in the hardware section. Talking to the user, the OOBE was different, e.g giving it a name, even though it ended up with our device name pattern.
Just saying we used Autopilot is not proof that it is working as expected, the user was still admin.

As the deployment profile was assigned in the meantime, resetting/wiping the device, and starting from nothing had the expected OOBE & ESP, standard user was the result and user is not able to change computer name anymore.

HI... Could you explain what you are trying to prevent... because normally a user cant rename the device name (system settings) if they are not local admin
Changing the device name in the company portal :

"This action changes the device name that the user can see in the Company Portal. It does not change the local device name, only the listing in the Company Portal."

So that doesn't rename the device name itself in Intune...