1. Create an account on the device, random password, admin permissions, no biometrics.
2. Create a user account for the user. User login name must follow the same convention that you see for username in Duo.
3. Add the user who will be using the Mac to the grp-IntuneMacOS group.
3. Install CW and ScreenConnect. ScreenConnect installer will have to be built in CW Control admin center. Install Duo for MacOS. (Contact jruppe@katmaicorp.com) for assistance. (will add installers soon)
4. Install Company portal https://learn.microsoft.com/en-us/mem/intune/user-help/enroll-your-device-in-intune-macos-cp, sign in and register the device.
5. Change the device's Intune registration profile from personal to corporate.
6. Make sure Duo works, have user create offline enrollment code.