Hi Michael Niehaus,
With regards to the Technician phase of a "White Glove" deployment, in a Hybrid Deployment scenario, wouldn't the technician be adding the device into the om premise domain as part of the technician white glove process?
My understanding and experience with WG is that you setup the machine as required with all application and connections and then reseal the machine for deployment to the end users. The re-sealing of the machine effectively puts the machine into a semi OOB state for the next startup and logon, however the previous WG install and setup settings are retained. Would this not include the domain join as well has the hybrid join.
Also, with regards to the VPN Configuration policy with intune, as tech that supports many SME's that us Cisco Meraki devices for VPN connectivity, there does not appear to be an option in the intune VPN profiles for a L2Tp/IPsec with preshared keys.
Are you able to advise on how this can be done in intune, I have reviewed several CSP documents for URI paths and keys but have not been able to locate any information on this type of VPN connection profile.