AMA: Powerful Apple device management with Intune

We have many issues with Intune compliance and Macs due to the workplace join key in keychain. Would using Intune as the MDM for our macs change the way this works? Computers on the daily are not sending Device ID with browsers and users think they are not enrolled in Intune anymore. Here are the two situations I see. Any thoughts? support had no ideas. 1. Users browser just doesn't prompt for access to the key. Use normal browser clear / changing OS defaults until it finally asks user. 2. User forgets password and HD walks them through account recovery locally. This clears out their keychain and the workplace join key. This means we need to have a tech with delete rights in azure ad and intune to delete the records and re-enroll in intune to resolve fully.