When the unit joined to on-prem , you can use GPO to get it done or many other approaches to script it and get it done however with Azure/intune ,You can utilize powershell scripting or CSP's .In my circumstance, I need to produce a user account where the password can't be transformed and several comment to explain the user:I’ve received this put