Contoso purchases 200 new MacBook devices through a reseller and wants them to enroll into Intune automatically during initial setup, with a corporate-branded Setup Assistant, no local admin rights for the user, and supervision enforced. The devices have been added to Contoso's Apple Business Manager account and assigned to the Intune MDM server token. What must you configure in Intune to control the out-of-box enrollment experience for these Macs?