Intune Enrollment & Policy Configuration -- 2

I need Microsoft Intune fully configured so that both Windows and macOS devices can be enrolled smoothly and kept secure. The scope covers initial setup of enrollment profiles, creation of security and compliance policies, and Azure AD Conditional Access rules that gate company resources and SaaS apps behind device-health checks. Everything must support a BYOD model without exposing corporate data.

Key points I want addressed
• Autopilot/Company Portal enrollment flows for Windows and macOS
• Baseline compliance settings (password, encryption, OS update cadence) and security baselines tuned to our environment
• Conditional Access policies that tie sign-in to device compliance status
• Application protection policies so corporate data stays within managed containers on personal devices
• Clear written documentation of every profile, policy and assignment, plus a short hand-over session so my team can maintain the tenant on its own

I will provide tenant access and branding assets; you bring the Intune, Azure AD, and Endpoint Manager expertise to get us production-ready.