You have 200 Azure AD–joined Windows 10 PCs enrolled in Intune. To enable self-service password reset from the sign-in screen, which section in the Intune admin center should you modify?

To enable self-service password reset (SSPR) from the Windows 10 sign-in screen, you need to configure a device configuration profile in Intune. This profile allows you to deploy settings to devices, including the specific policy that enables the SSPR link on the lock screen. Device enrollment is incorrect because it deals with how devices are registered with Intune, not their ongoing configuration. Conditional access is incorrect as it manages access to resources based on conditions, not device-level features like SSPR on the sign-in screen. Device compliance is incorrect because it defines and monitors security and health standards for devices, rather than enabling specific user-facing features on the sign-in screen.