2,108 questions with Microsoft Security | Intune | Configuration tags
Intune Configuration Policy - Maximum Minutes of Inactivity Until Screen Locks (Windows 10)
I am trying to push out a policy to lock the Windows 10 devices after they have been inactive for 15 minutes. I have pushed out a test policy to my device to lock after 1 minute. I can see that the policy was applied to my device, but it does not lock…
Microsoft Security | Intune | Configuration
"ADMX_RemovableStorage/WPDDevices_DenyWrite_Access_1" gets failed with error code 0x87d1fde8
SETTING WPDDevices_DenyWrite_Access_1 [./User/Vendor/MSFT/Policy/Config/ADMX_RemovableStorage/WPDDevices_DenyWrite_Access_1] STATE Error SOURCE PROFILES - OMA_URI configuration ERROR CODE 0x87d1fde8
Microsoft Security | Intune | Configuration
How to exclude all company devices from an Intune Application Protection Policy (APP)
Our company environment is in a hybrid setup. We have an on-prem Entra Connect server synchronizing our on-prem AD with Entra ID in the cloud. We also use Intune to manage our devices including Windows, iOS, and Android. The new project I am working on…
Microsoft Security | Intune | Configuration

How to disable Windows Hello for Business without impacting current users
By default, WHFB is always enabled via Device Enrollment sub-settings. If I would change this setting below to "Disabled", it will stop from appearing after autopilot. But then existing users who has enabled WHFB by themselves will loose the…
Microsoft Security | Intune | Configuration


Issue with Snip & Sketch and Notepad Not Launching in Windows 11 Multi App Kiosk with Edge
Issue : In Windows 11 Multi app kiosk mode when Apps like snip and sketch, Notepad are added along with Microsoft Edge. Both Snip and Sketch, Notepad does not launch. Only Small Installing bar is shown in the start menu once it is completed the App does…
Microsoft Security | Intune | Configuration
Screen timeout configuration won't apply
I've set everything up in Intune so I my Android tablet users (all Samsung btw) can set a screen timeout of maximum 15 minutes. Even though everything needed is configured in Intune, my users can only select a timeout of maximum 5 minutes (see…
Microsoft Security | Intune | Microsoft Intune Android
Microsoft Security | Intune | Configuration
Microsoft Security | Intune | Other
Clear Device Category in Intune and set it to Unassigned (null)
Hi, I've been exploring a way to clear the Device Category for an Intune-managed device using a PowerShell script. I've registered an app with the necessary permissions, following the guidance from this Microsoft Q&A post, We've detected a Microsoft…
Microsoft Security | Intune | Configuration
Conditional Policy not matching Platform and blocking access
We are implementing a conditional access policy to limit BYOD iPhones to use the Outlook App. We have followed the recommendations…
Microsoft Security | Intune | Configuration
Microsoft Security | Microsoft Entra | Other
Restricting Software Installation by End Users in M365 – Best Practices
We would like to restrict end users from installing software on their devices and only allow installation when explicitly approved by an administrator. One method we are considering is to create two groups on the admin side: a Normal User group and a…
Microsoft Security | Intune | Configuration

How to deploy printers with Intune using device groups
I'm trying to deploy a printer that I have setup in Universal Print to some workstations (so that anyone who logs in gets the printer) with an Intune policy. I have been able to make it work using a group containing user accounts. But, it will not work…
Microsoft Security | Intune | Configuration
Cannot remove MDM profile from iPhone after removal from Intune
I have a corporate issued iPhone that's controlled by a MDM profile via Intune. The company agreed to remove the MDM profile to let me have the phone as a personal device. They said they removed the phone from Intune. However, the MDM profile is still…
Microsoft Security | Intune | Configuration
Microsoft Security | Intune | Enrollment
Updating the Application Name for Hearsay in Intune After Rebranding
An application named Hearsay for Intune has been rebranded to Yext. Currently, the app still displays "Hearsay" on end users' devices, causing concerns among the Lines of Business. The goal is to update the application name in Intune to reflect…
Microsoft Security | Intune | Configuration

Error applying VBS and HVCI security baselines via endpoint/intune
Receiving the following errors when attempting to apply the security baselines to some machines via intune I can see both services are already running on the machine (which rules out hardware support, configuration etc) I can see this error (amongst a…
Microsoft Security | Intune | Configuration
How to export Autopilot devices from Intune or Entra ID which shows its part of Autopilot with separate column in report as I am not able to see it in Intune and Entra ID as well?
How to export Autopilot devices from Intune or Entra ID which shows its part of Autopilot with separate column in report as I am not able to see it in Intune and Entra ID as well? See below snap from Intune which does not show it.
Microsoft Security | Intune | Security
Microsoft Security | Intune | Configuration
Microsoft Security | Intune | Application management
Microsoft Security | Intune | Enrollment
Microsoft Security | Intune | Other
Intune config for Win 11 Taskbar customization
I'm trying to customize the taskbar for Win 11 laptops/PCs. I've tried the XML, but still no luck. Where should I apply this XML file, is it as an Intune custom object or Settings Catalogue? If you got any working examples, please share with me. Thanks
Microsoft Security | Intune | Configuration

Intune - LAPS - local account dont gets created
Hello community, i don't get often here, so in case i'm doing something wrong please show some mercy. Here is the situation: We've been using intune in the bundle with autpilot quite a while and it's beem working like a charm. But now we ran into an…
Microsoft Security | Intune | Configuration
Setup wallpaper with System Information
We have a requirement for configuring and deploying a Desktop wallpaper via Intune with the following properties: The wallpaper should display System Information. something like below(we would like to increase the properties to include OS versions…
Microsoft Security | Intune | Configuration
Error code 80004005
Getting an error code 80004005 while setting up windows for new user through autopilot, What does it mean? and How to solve it? or What is the right procedure to assign auto-pilot to an organizational device
Microsoft Security | Intune | Configuration
Configuring app protection and conditional access on mobile devices for Office365 while allowing exchange online for sync to native calendar app
I would like to use conditional access to control access to Office365 on iOS and Android using App Protection Policies and I would like to allow syncing of the work calendar to the native calendar on the mobile devices. An APP has been set up for…
Microsoft Security | Intune | Configuration
Unable to Enforce BitLocker Pre-Boot PIN via Intune on Windows 11 Pro (Azure AD Joined)Hello, I'm managing a fleet of Windows 11 Pro devices that are Azure AD joined and fully managed via Microsoft Intune under a Microsoft 365 Business Premium tenant. My
Hello, I'm managing a fleet of Windows 11 Pro devices that are Azure AD joined and fully managed via Microsoft Intune under a Microsoft 365 Business Premium tenant. My goal is to enforce BitLocker encryption on the OS drive with TPM + pre-boot PIN…