Event banner
Event details
Will you consider changing it so that devices that are enrolled by an end user in Intune management will not assign Local Admin to that end user by default? I realize that there is a way to resolve this using Autopilot or Local User Group Mgmt policies but it is not suitable for all scenarios and may create a small gap in which the device can be exposed.