Azure Infrastructure Setup (P2S VPN, DNS, InTune Configuration & Domain Joining Laptops)

I have a new company with infrastructure setup totally in Azure (nothing on premise). I need assistance with the following please: 1. Creating an always on P2S VPN device tunnel with fully working DNS 2. Domain joining 6 new laptops (i.e. in [login to view URL], not WORKGROUP) 3. Setting up best practice configuration in InTune for mobile devices 4. Upgrading Windows 11 Pro to Enterprise (we have M365 E3 licences) 5. Advice on best practice for security This is the initial work required and we are looking for a fast turnaround please. There will be more as we have additional requirements we'll look at once the above is complete. Regards, Jason