We have close to 30+Microsoft Teams Rooms devices in our organisation. We have not domain joined the mini PC’s and they mostly have default settings (we have changed local admin password).

Can anyone share their experience of having these devices joined to Intune and Azure AD for applying of organisation policies, update settings and control of local admin password (so we don’t have to do it manually on every machine)?

Potentially would look at conditional access too.