An enrolled device is not a trusted device — not until it meets your compliance baseline. This part builds the compliance policy and Conditional Access rules that enforce it, safely.

Before you configure compliance or deploy software, you need the right licence, the right groups, and a device that successfully talks to Intune. This first part gets you there from a blank tenant.