Details.
Autopilot-style provisioning for new machines, compliance policies connected to Conditional Access, application deployment and update rings, disk encryption, local administrator control, mobile access policies for mail and Teams, and remote wipe for lost or departing devices.