Best Management platform for Non-Domain Win 10 Laptops

Hey Team,

I have been closely following your blogposts and guides to manage Win 10 devices on Intune via Autopilot. It has helped me quite a lot on what can be done and what has a limit.

What I would like to know is which management tool is best suited for a series of Non-Domain Joined Win 10 Laptops, SCCM or Intune. How secure can we make the laptops through Intune. The use case for this is that these devices should only be able to access internal resources and should not have any communication outside of the said corporate network.

Regards,
Nithin