Sharing a recap of the questions covered, along with associated timestamps: 

Question – What’s the best way for customers to provide feedback/additional requests on the new dashboard? Is there a method of doing this in the console? – answered at 14:08.

Question – What’s the best way to block access for terminated employees: device controls or Conditional Access? – answered at 16:42.

Question – We have a customer who wants a report that identifies non-Windows devices, corporate or BYOD. How do I identify these? – answered at 20:47.

Question – How do you secure remote and BYOD devices using Intune? What are the best practices? – answered at 23:25.

Question – How do you use Attack Service Reduction, WDAC, and Attack Service Reduction ASR together in Intune? – answered at 29:02.

Question – In your opinion, how does the new Windows 11 administrator account protection feature impact thinking about the need for standard user accounts? – answered at 33:52.

Question – What options do we have to completely lock or disable a device if a user fails to return it  within the defined timeframe? – answered at 38:24.

Question – How do we replicate advanced BitLocker/TPM settings in Intune that previously existing in MBAM or GPO? – answered at 41:21.

Question – Do you recommend a specific security baseline for maximizing device security? – answered at 43:25.

Question – Can we see what devices are being removed before they are removed as a result of the device cleanup rules? – answered at 47:37.

Question – What do we or what should we do when we have required security settings that aren’t available in Intune? – answered at 49:30.

Question – I think a common question we hear from our customers is, are we doing this right? What frameworks or assessments exist to help evaluate where you are at with Zero Trust? – answered at 54:08.