In an average day, I provision a bunch of Windows 10 devices using Microsoft Intune and Windows Autopilot, including Office 365 ProPlus.  But somehow I never actually launched Outlook (or if I did, I didn’t pay attention to what I needed to do to configure it).  It’s not very pretty:

What you really want to see is a fully-automated configuration (similar to what Teams does).  This exact scenario came up in a customer conversation today, and I didn’t remember what this takes.  After a few conversations with the Office team, they confirmed that this can be done using what is called ExchangeZeroConfig.  There are documents that describe how to do this with GPO (or worse, by poking in registry values) but of course I wanted to do it with Intune and Azure AD-joined devices.  

Fortunately, with the addition of Administrative Templates in Intune, this becomes fairly straight-forward, as you just need to set the “Automatically configure profile based on Active Directory Primary SMTP address” policy, targeting that to “All users”:

Then, when you launch Outlook for the first time, the experience is greatly streamlined:

Much simpler.

One caveat with that:  You need to make sure to use the enrollment status page (and not disable it for the user) so that Intune has time to get the user policy applied before the user launches Outlook. It doesn’t take long for Intune to do that, but some people could manage to launch Outlook faster.