MDM control of apps outside of the managed APFS volume. Application security policies still utilize to those applications. Even so, You cannot get above management or deploy a managed version of such applications Except if the consumer deletes them from their gadget.. The device consumer initiates enrollment by signing into your Intune Organization