Fixed by having user reboot Mac Book a few times until InTune Security Policy kicked in and forced user to create a password before logging in.
Macbooks apparently allow users to remove administrator passwords by leaving the new password blank when updating the password, which this user had done. Saw this when I was assisting user with installing customer portal and they were not challenged with a password.