@Rich T, Thanks for posting in Q&A. In Fact, you don’t need to assign the device licenses to devices. You just need to have enough license for the number of devices you’re deploying.
https://learn.microsoft.com/en-us/mem/intune-service/fundamentals/licenses#device-only-licenses
For the configurations and app deployments stuck pending issue, it is caused by other reasons. You can set Show app and profile installation progress as yes in ESP to find out which phase the configuration and application are stuck. Know what the affected policy and application are. Then do further troubleshooting.
Due to not compliant with BitLocker, this needs to firstly configure BitLocker policy via the following policy. Please ensure the policy to enable BitLocker is already configured and applied to the device group successfully.
https://learn.microsoft.com/en-us/mem/intune-service/protect/encrypt-devices
Please check the above information and if there's any update feel free to let us know.
If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.