Microsoft Intune & Configuration Manager: best practices to help you prepare for Windows 11

I've been trialing out Windows 11 with Intune management Currently I experience issues with Always On VPN. Deploying it using the conventional Configuration Policy seems to create a VPN profile requiring me to input a Username + Password, even though the VPN client should be using a certificate When deleting the VPN client and syncing the device a new one should be created within a few minutes but it never is Attempting to create the VPN tunnel using a XML file doesn't work as well as Intune says the device is "Not Applicable" under Deployment Status Enrolling the device manually (a VM) using a Powershell Script pointing to the Profile XML seems to work and it then authenticates with the correct certificate Are you aware if this should work in Windows 11 or not?, I've not filed a bug report yet as I've been busy doing other tasks but I'd like to see that our setup works smooth on Windows 11 prior to the official launch date