Using Intune and Entra ID feature to make sure the device cannot be formatted by the user?

@EnterpriseArchitect, Thanks for porting in Q&A. To configure Intune for your existing laptop users globally so that when the laptop is formatted by the users it will still do the enroll. Based on my experience, you can do Autopilot register and enroll the device via Autopilot enrollment.

https://video2.skills-academy.com/en-us/autopilot/tutorial/autopilot-scenarios

Based as I know, for the device registered with the Windows Autopilot deployment service. Although the end user reset the device, it will still come to Autopilot enrollment stage to ask for entering organization user account to login when it connects to the Internet.

https://video2.skills-academy.com/en-us/autopilot/registration-overview

Therefore, I think this is an option for your scenario.

Meanwhile, you can try to use a remote device action from within the Microsoft Intune admin center to locate a device which is lost or stolen.

https://video2.skills-academy.com/en-us/mem/intune/remote-actions/device-locate

Hope the above information can help.

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.