Is there any way to allow users to enroll in Intune on W10, while the computer is local domain joined, without giving them admin rights locally? I can't seem to find a way around giving them temp rights, enrolling, and then removing the admin rights.
Using Azure premium with EMS licenses, AD is connected to Azure AD in passthrough.