Got an question,
is there a way how to quickly get device restriction profile on the device after the device is enrolled with Intune.
We are using the enrolment with single app lock for Intune Company Portal, but when the user will register there is about 15 minutes delay (sometimes) to obtain restrictions profile, in that time user is able to log in with his Apple ID and even download some applications. Which is not a good behaviour when you are talking about secure company only device…
The scenario is DEP company owned device - that gets the restrictions immediately after user will enrol.