Intune device configuration before user enrollment
There is no possibility to configure devices before enrollment.
Right now Zero Touch enrollment for Android is not supported but using
Samsung Knox or Apple DEP you get that functionality.
But using Apple DEP for example, all devices is added to Intune when conneted to Wi-Fi and Company portal is installed without user device enrollment.
But there is no posibility to install configuration profiles on the devise befor enrollment. For a security reason and to be able to force a user to enroll with Intune this is needed.
To be able to put restrictions and specific configuration on the device so the user want to enroll the device.
This is also important for stolen devices that will never be enrolled so we can make them absolutley pointless for the end user, by putting so much restriction on the device and remove all the applications and not allowing new ones to be installed.