Also, one annoying issue for Mac enrollment in Intune is the way compliance is displayed for devices without user affinity. Even though a mac is compliant with all the applied policies, the search GUI will display it as Non Compliant, and it drives me CRAZY.