csrutil disable
Restart computer
In the terminal, type
sudo open /Applications/TextEdit.app /System/Library/LaunchDaemons/com.apple.ManagedClient.enroll.plist
change
<key>com.apple.ManagedClient.enroll</key>
<true/>
to
<key>com.apple.ManagedClient.enroll</key>
<false/>
So that the changes take effect
You can send „Profiles“ to iOS Devices which gives you a much deeper access to the Devices as a usual User can have. You need it for IKEv2 or IKEv3 VPNs to for example.
The „easy“ and free to use method will provide „Apple Profile Manager“ which can be downloaded on Mac (!!) App Store for free. Just copy the sourcecode of this files to Intune Custom Profiles.
You also can download „Apple Server“ from AppStore for a couple of Bugs