2,108 questions with Microsoft Security | Intune | Configuration tags

Sort by: Updated
4 answers One of the answers was accepted by the question author.

Intune Configuration Policy - Maximum Minutes of Inactivity Until Screen Locks (Windows 10)

I am trying to push out a policy to lock the Windows 10 devices after they have been inactive for 15 minutes. I have pushed out a test policy to my device to lock after 1 minute. I can see that the policy was applied to my device, but it does not lock…

Microsoft Security | Intune | Configuration
asked 2020-12-09T18:58:21.607+00:00
CIS03 51 Reputation points
edited a comment 2025-08-12T07:40:49.52+00:00
Ulrich Gompf 0 Reputation points
0 answers

"ADMX_RemovableStorage/WPDDevices_DenyWrite_Access_1" gets failed with error code 0x87d1fde8

SETTING WPDDevices_DenyWrite_Access_1 [./User/Vendor/MSFT/Policy/Config/ADMX_RemovableStorage/WPDDevices_DenyWrite_Access_1] STATE Error SOURCE PROFILES - OMA_URI configuration ERROR CODE 0x87d1fde8

Microsoft Security | Intune | Configuration
asked 2025-07-09T10:10:23.94+00:00
Prasad Joshi 0 Reputation points
commented 2025-08-11T12:30:05.9366667+00:00
Catherine Kyalo 2,100 Reputation points Microsoft Employee
1 answer

How to exclude all company devices from an Intune Application Protection Policy (APP)

Our company environment is in a hybrid setup. We have an on-prem Entra Connect server synchronizing our on-prem AD with Entra ID in the cloud. We also use Intune to manage our devices including Windows, iOS, and Android. The new project I am working on…

Microsoft Security | Intune | Configuration
asked 2025-03-12T15:05:58.52+00:00
Woody Chiu at RASI 231 Reputation points
commented 2025-08-07T05:36:44.3633333+00:00
Teva PAOFAI 0 Reputation points
4 answers

How to disable Windows Hello for Business without impacting current users

By default, WHFB is always enabled via Device Enrollment sub-settings. If I would change this setting below to "Disabled", it will stop from appearing after autopilot. But then existing users who has enabled WHFB by themselves will loose the…

Microsoft Security | Intune | Configuration
asked 2023-10-09T15:56:18.02+00:00
Pavel yannara Mirochnitchenko 13,366 Reputation points MVP
edited the question 2025-08-06T23:36:30.9533333+00:00
Alison A 1,575 Reputation points Microsoft External Staff Moderator
1 answer

Issue with Snip & Sketch and Notepad Not Launching in Windows 11 Multi App Kiosk with Edge

Issue : In Windows 11 Multi app kiosk mode when Apps like snip and sketch, Notepad are added along with Microsoft Edge. Both Snip and Sketch, Notepad does not launch. Only Small Installing bar is shown in the start menu once it is completed the App does…

Microsoft Security | Intune | Configuration
asked 2025-07-14T13:26:53.04+00:00
TM_N 5 Reputation points
answered 2025-08-06T01:22:48.3133333+00:00
Ang Eng Seong 0 Reputation points
1 answer

Screen timeout configuration won't apply

I've set everything up in Intune so I my Android tablet users (all Samsung btw) can set a screen timeout of maximum 15 minutes. Even though everything needed is configured in Intune, my users can only select a timeout of maximum 5 minutes (see…

Microsoft Security | Intune | Microsoft Intune Android
Microsoft Security | Intune | Configuration
Microsoft Security | Intune | Other
asked 2024-02-16T11:00:24.7566667+00:00
Anonymous
commented 2025-08-04T15:40:25.4466667+00:00
Ken Iverson 0 Reputation points
2 answers One of the answers was accepted by the question author.

Clear Device Category in Intune and set it to Unassigned (null)

Hi, I've been exploring a way to clear the Device Category for an Intune-managed device using a PowerShell script. I've registered an app with the necessary permissions, following the guidance from this Microsoft Q&A post, We've detected a Microsoft…

Microsoft Security | Intune | Configuration
asked 2025-07-25T07:46:20.3833333+00:00
Karim Ibrahim 25 Reputation points
commented 2025-08-04T14:33:26.6333333+00:00
Karim Ibrahim 25 Reputation points
2 answers

Conditional Policy not matching Platform and blocking access

We are implementing a conditional access policy to limit BYOD iPhones to use the Outlook App. We have followed the recommendations…

Microsoft Security | Intune | Configuration
Microsoft Security | Microsoft Entra | Other
asked 2024-10-28T18:49:17.2433333+00:00
KalpAdmin 0 Reputation points
edited a comment 2025-08-03T08:02:57.66+00:00
Pradeep M 9,785 Reputation points Microsoft External Staff Moderator
1 answer

Restricting Software Installation by End Users in M365 – Best Practices

We would like to restrict end users from installing software on their devices and only allow installation when explicitly approved by an administrator. One method we are considering is to create two groups on the admin side: a Normal User group and a…

Microsoft Security | Intune | Configuration
asked 2025-08-01T18:29:53.9933333+00:00
Yuuta Shimamura 0 Reputation points
answered 2025-08-02T13:58:44.68+00:00
Rahul Jindal 11,076 Reputation points
1 answer One of the answers was accepted by the question author.

How to deploy printers with Intune using device groups

I'm trying to deploy a printer that I have setup in Universal Print to some workstations (so that anyone who logs in gets the printer) with an Intune policy. I have been able to make it work using a group containing user accounts. But, it will not work…

Microsoft Security | Intune | Configuration
asked 2025-03-05T17:09:30.76+00:00
James Morgan 30 Reputation points
accepted 2025-07-31T20:00:14.15+00:00
James Morgan 30 Reputation points
4 answers One of the answers was accepted by the question author.

Cannot remove MDM profile from iPhone after removal from Intune

I have a corporate issued iPhone that's controlled by a MDM profile via Intune. The company agreed to remove the MDM profile to let me have the phone as a personal device. They said they removed the phone from Intune. However, the MDM profile is still…

Microsoft Security | Intune | Configuration
Microsoft Security | Intune | Enrollment
asked 2022-01-19T19:39:22.87+00:00
Anon Account 31 Reputation points
answered 2025-07-31T08:04:01.98+00:00
Yvonne Xio 0 Reputation points
1 answer

Updating the Application Name for Hearsay in Intune After Rebranding

An application named Hearsay for Intune has been rebranded to Yext. Currently, the app still displays "Hearsay" on end users' devices, causing concerns among the Lines of Business. The goal is to update the application name in Intune to reflect…

Microsoft Security | Intune | Configuration
asked 2025-07-30T19:53:02.08+00:00
Holman, Steve 0 Reputation points
answered 2025-07-30T19:57:37.51+00:00
Jose Benjamin Solis Nolasco 4,986 Reputation points
1 answer

Error applying VBS and HVCI security baselines via endpoint/intune

Receiving the following errors when attempting to apply the security baselines to some machines via intune I can see both services are already running on the machine (which rules out hardware support, configuration etc) I can see this error (amongst a…

Microsoft Security | Intune | Configuration
asked 2025-01-08T15:09:54.77+00:00
Ben Johnston 5 Reputation points
commented 2025-07-30T11:27:12.45+00:00
EB 0 Reputation points
2 answers

How to export Autopilot devices from Intune or Entra ID which shows its part of Autopilot with separate column in report as I am not able to see it in Intune and Entra ID as well?

How to export Autopilot devices from Intune or Entra ID which shows its part of Autopilot with separate column in report as I am not able to see it in Intune and Entra ID as well? See below snap from Intune which does not show it.

Microsoft Security | Intune | Security
Microsoft Security | Intune | Configuration
Microsoft Security | Intune | Application management
Microsoft Security | Intune | Enrollment
Microsoft Security | Intune | Other
asked 2023-11-29T17:40:31.6233333+00:00
Vinod Survase 4,791 Reputation points
commented 2025-07-28T11:26:14.1933333+00:00
2 answers

Intune config for Win 11 Taskbar customization

I'm trying to customize the taskbar for Win 11 laptops/PCs. I've tried the XML, but still no luck. Where should I apply this XML file, is it as an Intune custom object or Settings Catalogue? If you got any working examples, please share with me. Thanks

Microsoft Security | Intune | Configuration
asked 2025-07-21T13:32:34.07+00:00
lmgmcg 130 Reputation points
commented 2025-07-26T09:22:04.2133333+00:00
EduardsGrebezs 941 Reputation points
2 answers One of the answers was accepted by the question author.

Intune - LAPS - local account dont gets created

Hello community, i don't get often here, so in case i'm doing something wrong please show some mercy. Here is the situation: We've been using intune in the bundle with autpilot quite a while and it's beem working like a charm. But now we ran into an…

Microsoft Security | Intune | Configuration
asked 2025-07-24T07:35:16.8066667+00:00
Alex 20 Reputation points
accepted 2025-07-25T14:37:03.46+00:00
Alex 20 Reputation points
0 answers

Setup wallpaper with System Information

We have a requirement for configuring and deploying a Desktop wallpaper via Intune with the following properties: The wallpaper should display System Information. something like below(we would like to increase the properties to include OS versions…

Microsoft Security | Intune | Configuration
asked 2025-07-24T04:16:49.4633333+00:00
IntuneUser 181 Reputation points
edited the question 2025-07-25T03:29:56.6266667+00:00
IntuneUser 181 Reputation points
1 answer

Error code 80004005

Getting an error code 80004005 while setting up windows for new user through autopilot, What does it mean? and How to solve it? or What is the right procedure to assign auto-pilot to an organizational device

Microsoft Security | Intune | Configuration
asked 2022-03-09T20:21:36.393+00:00
Aditya Patel 11 Reputation points
commented 2025-07-24T16:56:32.49+00:00
Steve Robbins 0 Reputation points
0 answers

Configuring app protection and conditional access on mobile devices for Office365 while allowing exchange online for sync to native calendar app

I would like to use conditional access to control access to Office365 on iOS and Android using App Protection Policies and I would like to allow syncing of the work calendar to the native calendar on the mobile devices. An APP has been set up for…

Microsoft Security | Intune | Configuration
asked 2025-07-24T13:15:28.5833333+00:00
25696558 0 Reputation points
0 answers

Unable to Enforce BitLocker Pre-Boot PIN via Intune on Windows 11 Pro (Azure AD Joined)Hello, I'm managing a fleet of Windows 11 Pro devices that are Azure AD joined and fully managed via Microsoft Intune under a Microsoft 365 Business Premium tenant. My

Hello, I'm managing a fleet of Windows 11 Pro devices that are Azure AD joined and fully managed via Microsoft Intune under a Microsoft 365 Business Premium tenant. My goal is to enforce BitLocker encryption on the OS drive with TPM + pre-boot PIN…

Microsoft Security | Intune | Configuration
asked 2025-07-23T07:36:02.4433333+00:00
StackAble 0 Reputation points
edited the question 2025-07-24T02:11:45.87+00:00
Ian-T 2,200 Reputation points Microsoft External Staff Moderator