You manage Windows 11 devices with Intune and need to add User1 to the Remote Desktop Users group on every device in the marketing department so they can provide remote support. What type of policy should you deploy?

An account protection policy is the correct choice because it allows you to manage local user groups on Windows devices, including adding users to the Remote Desktop Users group. This policy type is specifically designed for configuring security-related settings like local group membership. An app configuration policy is used for managing settings within specific applications. A device compliance policy defines conditions a device must meet to be considered compliant, but it doesn't directly modify local group memberships. A device configuration profile is a broader category for configuring various device settings, but for local group management, the more specific account protection policy is the appropriate tool.