Settings Catalog & Configuration Profiles
Compliance tells Intune whether a device is healthy. Configuration profiles tell the device how to behave. This part deploys five production-ready profiles — BitLocker, WHfB, OneDrive KFM, Edge hardening, and Update rings.