Thank you everyone for your participation in this session! Sharing the questions covered during the live Q&A, along with associated timestamps:

Question – There are a lot of preinstalled apps, macOS, basic apps, etc., How do we keep these from running in a professional environment when you’re managing these with Intune? – answered at 45:54.

Question – One aspect of Platform Single Sign-on (SSO) that is not equivalent on the Mac side is authorization groups. What would you tell an admin who misses or is looking for the same kind of functionality as authorization groups? – answered at 48:03.

Question – Does macOS has a BitLocker To Go equivalent that we can manage through Intune? – answered at 49:20.

Question – Can you use the Setup Assistant panes in the Setup Assistant screen for enrolling a shared device without user affinity? – answered at 50:12.

Question – AirDrop could create some data leak possibilities – have you any experience with controlling or limiting access to AirDrop? – answered at 51:42.

Question – Intune My Mac has a Company Portal install via script. Will this work for automatic device enrollment with Platform SSO, or does it need to be a line-of-business apps? – answered at 52:12.

Question – What are the main differences in enrollment for a corporate-owned versus a BYOD mac? – answered at 53:44.

Question – When should an admin use user affinity versus device affinity? – answered at 54:54.

Thank you guys! 👏

Hi, When Intune will get possibility to use Custom Attributes in dynamic Policy assignment for App policy deployment or script policy deployment?

I have a production ADE profile, and I recently created a new one to test LAPS. The new profile works, but my question is: should I move all my devices to this new ADE profile, or is there a better approach?

I also set the new profile as the default enrollment profile, but when I wipe a device, it still receives the ADE profile to which it was originally assigned.

IntuneMyMac has the Company Portal install via one of their scripts.  Will this work for ADE with PSSO, or do I need to have it as a LOB App?

Can you use the setup assistant panes for enrolling shared devices without user affinity? (bigger use case for shared Education devices)

Can you deploy Apps as available to devices enrolled without user affinity?

Hi, Have you been able to enable Platform SSO during ADE enrollment?

We have tried but we're never able to go past the 'sign in to your organization'

We enter our creds and it fails.

We have been using SSO post enrollment without issues for months

Thks

Does macOS have a BitLocker To Go equivalent we can manage through Intune? If not, how do we encrypt/manage removable media please?

Also we have found lots of Intune managed settings for Edge on macOS - but barely anything for Safari. How do we manage Safari settings via Intune please?

Welcome, everyone, to our June #IntuneForMSPs community meetup. If you have questions at any time during today's session, please post them here in the comments. We'll have time for Q&A at the end of Ugur's presentation.