You should add manage.microsoft.com to your recommended SSL exclusions list. SSL decryption of manage.microsoft.com immediately breaks Intune management on Windows PCs.