setting up macos devices in intune without having the user doing any set up once logged in - best practice

@Aran Billen, Thanks for posting in Q&A.

From your description, I know you have enrolled your macOS devices in Intune and want to configure them before user's login in.

Based on my research, here is a link about how to configure device settings and deploy apps you can refer.

https://learn.microsoft.com/en-us/mem/intune/apps/apps-company-portal-macos

Please note that if you want to deploy some configuration profiles or apps once before user sign in, you can create a device group and assign them to the device group, however, some settings or apps have to assign to user group which means users must sign in the device to sync with Intune to get policies and apps applied.

Hope it will help.

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.