All Mac enrollments in Microsoft Endpoint Manager except those enrolled using Automated Device Enrollment (ADE) are considered user-approved. Starting in macOS Big Sur, all user-approved enrollments are automatically considered supervised. Excluded Domains for per-app VPN connections.Prevent users from disabling automatic VPN.“Enable direct download” setting for associated domains.We now support the following new device configurations on Intune-managed Macs running macOS Big Sur and later: We are delighted to deliver new functionality enabled by the innovations on macOS 11 – ensuring that you enable productivity for your users wherever they are working or learning this fall. Microsoft Intune is excited to support Apple in their launch of macOS 11.