Looking at Microsoft Defender for Endpoint and defining policies within Intune for Citrix MCS VDI devices, devices are registered ok with MDE. I used the VDI onboarding script and method, although the policies stick on pending. I did notice this comment, and it gave me the impression this may not actually work! Is there a reccomended way of defining configuration settings? Should I give up on MDE / Intune for management and just use GPO?