Verified fixes from real IT environments.

Multiple newly imaged laptops are stuck on Account setup during ESP. Network is clean, apps are assigned, and the issue started after the latest Microsoft 365 service notices. Has anyone confirmed a reliable fix without wiping devices?

If MDE tamper protection flips back after Intune policy success, check for legacy Security Baseline GPO setting DisableAntiSpyware. Removing that stale policy and forcing gpupdate resolved the conflict across our fleet.