What is one must-have intune policy you always deploy to windows 365 Cloud PCs ?

A must-have Intune policy for Windows 365 Cloud PCs is device compliance + security baseline with BitLocker enabled and Windows Update for Business enforced. This ensures data is protected, updates are applied consistently, and the Cloud PC meets compliance standards. It’s largely the same as physical endpoints, but you’ll want to be careful with performance-impacting settings (e.g., app restrictions, Defender scans) since Cloud PCs run in shared infrastructure. Start with the Microsoft Security Baseline, then layer on BitLocker, update rings, and conditional access.