macOS and Apple ID restrictions
All, I am just starting out enrolling macOS devices with Intune/Endpoint Manager, and most things are working as expected. I have configuration policies for some items, some scripts to change things, install the company portal, etc. One thing I cannot seem to figure out is how to confine the Apple ID. I have the federation configured to ensure our corporate email addresses are Managed Apple IDs, but what I cannot seem to find or figure out is how to restrict the Apple ID login on corporate managed machines so the end user can only use our managed Apple IDs. I could settle for blocking Apple ID signin completely, and found a custom template that is supposed to do that, but it does not seem to work either. Has anyone accomplished this with Intune? I do have all iCloud settings disabled so the user should not be able to save things outside of OneDrive or local, but I really don't want the users to use a personal Apple ID and installing apps from the store, etc. Any direction would be appreciated.