Thank you everyone for your participation in this session! Sharing the questions covered during the live Q&A, along with associated timestamps:

Question – There are a lot of preinstalled apps, macOS, basic apps, etc., How do we keep these from running in a professional environment when you’re managing these with Intune? – answered at 45:54.

Question – One aspect of Platform Single Sign-on (SSO) that is not equivalent on the Mac side is authorization groups. What would you tell an admin who misses or is looking for the same kind of functionality as authorization groups? – answered at 48:03.

Question – Does macOS has a BitLocker To Go equivalent that we can manage through Intune? – answered at 49:20.

Question – Can you use the Setup Assistant panes in the Setup Assistant screen for enrolling a shared device without user affinity? – answered at 50:12.

Question – AirDrop could create some data leak possibilities – have you any experience with controlling or limiting access to AirDrop? – answered at 51:42.

Question – Intune My Mac has a Company Portal install via script. Will this work for automatic device enrollment with Platform SSO, or does it need to be a line-of-business apps? – answered at 52:12.

Question – What are the main differences in enrollment for a corporate-owned versus a BYOD mac? – answered at 53:44.

Question – When should an admin use user affinity versus device affinity? – answered at 54:54.