2,216 questions with Microsoft Security | Intune | Configuration tags

Sort by: Updated
Updated Created Answers
2 answers

{{OnPremisesSecurityIdentifier}} strong certificate binding enforcement

We have this: https://support.microsoft.com/en-gb/topic/kb5014754-certificate-based-authentication-changes-on-windows-domain-controllers-ad2c23b0-15d8-4340-a468-4d4f3b188f16 Then we have…

Microsoft Security | Intune | Configuration
asked 2025-02-26T10:00:30.62+00:00
Sebastian Cerazy 351 Reputation points
answered 2026-09-03T07:16:25.0633333+00:00
Sebastian Cerazy 351 Reputation points
1 answer

Windows BYOD Edge MAM enrollment blocked by Conditional Access policy requiring compliant devices

We are implementing a Windows BYOD solution using Microsoft Intune App Protection Policies (MAM) for Microsoft Edge and Conditional Access. Expected behavior Approved users in the BYOD Users group should be able to access Microsoft 365 resources from…

Microsoft Security | Intune | Configuration
asked 2026-09-01T05:36:02.5466667+00:00
Chitranjan Singh 0 Reputation points
answered 2026-09-01T05:36:28.2766667+00:00

AI answer

4 answers

Inunte-macOS custom vpn configuration

I am trying to create a custom VPN profile for macOS in Intune portal, not using any third-party VPN client and, trying to use the in-built mac VPN app "com.apple.vpn.managed" to connect but it fails not getting any response back neither from…

Microsoft Security | Intune | Configuration
asked 2021-09-06T20:25:11.543+00:00
tn-57-gs 31 Reputation points
commented 2026-08-31T15:12:35.24+00:00
Félix Pratt-Damico 0 Reputation points
1 answer

‎Intune Dell BIOS Configuration – Status Mismatch and Password Sync Issue‎

Hello, I am using the “BIOS configurations and other settings” configuration profile in Microsoft Intune to manage BIOS settings and passwords. I am currently experiencing an issue on a laptop where there is a mismatch between the status reported in…

Microsoft Security | Intune | Configuration
asked 2026-05-14T12:49:41.3133333+00:00
Kyuzo88 106 Reputation points
commented 2026-08-18T22:50:53.5533333+00:00
Liss, Drew 0 Reputation points
2 answers One of the answers was accepted by the question author.

How to enforce Edge Browser to stop using Personal and only allows Work account to sync?

Would it be possible to enforce and only allow the Microsoft Edge browser to log in and open as a Work Account instead of as a Personal account? My corporate workstation has been configured as Hybrid Azure AD Joined and managed by Intune, so I wonder if…

Windows for business | Windows Client for IT Pros | Directory services | Active Directory
Microsoft Security | Intune | Configuration
Microsoft Security | Intune | Grouping
Microsoft Security | Intune | Other
Microsoft Edge | Microsoft Edge development
asked 2024-09-16T04:40:37.32+00:00
EnterpriseArchitect 6,411 Reputation points
commented 2026-08-14T11:51:19.7766667+00:00
Jean-Seb 25 Reputation points
2 answers

Addressing 'Disable JavaScript on Adobe Reader DC

Hello All, Can somebody please assist. How do I Address Defender Security Recommendation 'Disable JavaScript on Adobe DC. I have 100 devices that needs remediation, is there a PS script I can run or another option?

Microsoft Security | Intune | Configuration
asked 2025-03-05T15:28:15.29+00:00
Jay Tee 40 Reputation points
commented 2026-08-09T09:01:57.9966667+00:00
Darren Milne 0 Reputation points
1 answer

Puah Wifi Profile from Intune

I push wifi configuration from intune, the setting will push wifi profile to auto connect. Currently i assign to all devices and now i want to exclude from a group. When we modify the assigment scope to exclude the group-A for example then the existing…

Microsoft Security | Intune | Configuration
asked 2026-08-03T11:57:47.1366667+00:00
Handian Sudianto 7,441 Reputation points
answered 2026-08-03T11:58:02.9066667+00:00

AI answer

1 answer

802.1x wired profile

Previously i push 802.1x user authentication wired profile from intune by export the xml file from working machine and deploy to all users. Now we will change from user authentication to computer authentication and want to know how to deploy this…

Microsoft Security | Intune | Configuration
asked 2026-07-29T01:07:59.9066667+00:00
Handian Sudianto 7,441 Reputation points
answered 2026-07-29T01:08:21.38+00:00

AI answer

1 answer

Push PKCS Intune

If we add one entry to the Subject Alternative Name then are qwe need to removethe existing certificate from the host and from the CA Authrotity? Or after adding the entry then intune will repush the new cert?

Microsoft Security | Intune | Configuration
asked 2026-07-28T06:37:43.36+00:00
Handian Sudianto 7,441 Reputation points
answered 2026-07-28T06:38:03.2633333+00:00

AI answer

1 answer

Microsoft 365 Apps Cloud Policy - Can a User Scoped Policy (Not Configured) Override a Tenant Policy?

Hello, I am looking for guidance regarding Microsoft 365 Apps Cloud Policy Service behavior and policy precedence. Current Configuration In Microsoft 365 Apps Admin Center → Policy Management (config.office.com), we have the following policies: …

Microsoft Security | Intune | Configuration
asked 2026-07-24T11:12:57.9633333+00:00
Ragaven007 0 Reputation points
answered 2026-07-24T11:13:41.24+00:00

AI answer

1 answer

bitlocker key not found in view bitlocker keys

bitlocker key not found in view bitlocker keys. There are two devices linked to my account I could see one but the other one not found

Microsoft Security | Intune | Configuration
asked 2026-07-20T17:44:45.54+00:00
Jeenath Nawabjan 0 Reputation points
answered 2026-07-20T17:45:07.6033333+00:00

AI answer

1 answer

Why doesn’t Intune support forcing BitLocker PIN after deployment like MBAM did?

Hello, We used MBAM for years because it had a unique feature: it could enforce TPM+PIN after a certain time or immediately after deployment. This was critical for our security policy. Now that MBAM is deprecated and we are moving to Intune/ConfigMgr…

Microsoft Security | Intune | Configuration
asked 2025-12-03T08:02:53.9733333+00:00
Belan Marek 56 Reputation points
commented 2026-07-17T08:19:08.9766667+00:00
LeeW 6 Reputation points
1 answer

How to make Power Options configurable for users via Intune?

Hi All, How do I make Power Options configurable for users via Intune? Right no these settings are greyed out i.e. not available for users to customize. I do not want to create some specific configuration but instead want allow users to configure…

Microsoft Security | Intune | Configuration
asked 2026-07-13T23:30:27.6233333+00:00
DT_2026 45 Reputation points
answered 2026-07-13T23:31:37.9+00:00

AI answer

1 answer

To Enable Kernel-mode Hardware-enforced Stack Protection in the Intune configuration policy

Hi Team, I am trying to enable both Memory Integrity (HVCI) and Kernel-mode Hardware-enforced Stack Protection on Windows 11 devices using Intune. Currently, I have configured the following Intune policy: Devices > Configuration Profiles > Settings…

Microsoft Security | Intune | Configuration
asked 2026-06-25T06:48:37.6933333+00:00
Vinayak Kanavimath 20 Reputation points
answered 2026-07-10T08:43:56.5633333+00:00
Roy E. Ingvaldsen 0 Reputation points
0 answers

Intune Custom OMA-URI Policy for AppLocker Shows "Not Applicable" on Windows Multi-Session AVD

I'm trying to deploy an AppLocker policy to Windows Enterprise Multi-Session AVD hosts using an Intune Custom OMA-URI policy, but the deployment status shows "Not Applicable." Could someone confirm whether: My OMA-URI path is incorrect, or …

Microsoft Security | Intune | Configuration
asked 2026-07-09T06:26:56.4433333+00:00
Siu476 0 Reputation points
0 answers

Need help with Intune Custom VPN (VPNv2 CSP) - Windows unable to parse XML data (EAP-TLS)

Hi, I am trying to deploy a native Windows IKEv2 Split-Tunnel VPN profile via Microsoft Intune using a Custom OMA-URI policy. The goal is to enforce strict EAP-TLS authentication using device/user certificates. Target OMA-URI:…

Microsoft Security | Intune | Configuration
asked 2026-07-08T12:54:47.68+00:00
Brenden Dorler 0 Reputation points
0 answers

Duplicate entry in AAD

We have a hybrid environment. If we import the hash file of a Windows device after that, in Azure AD, 2 entry created, one entry joins type = "Microsoft Entra joined", MDM = blank and 2nd entry joins showing blank but MDM = "Microsoft…

Microsoft Security | Intune | Configuration
asked 2026-07-01T12:17:23.7133333+00:00
Sharad Patil 0 Reputation points
edited a comment 2026-07-03T22:15:17.5266667+00:00
Rahul Jindal 11,721 Reputation points
1 answer

Bitlocker Encryption Error Code Add-TpmProtectorInternal : Die Daten sind unzulässig. (Ausnahme von HRESULT: 0x8007000D)

Hello Everybody, For weeks now, I have been trying to solve a problem regarding an error code that appears when trying to enable BitLocker. The error code is 0x8007000D – The data is invalid. I have not found any articles that address this exact…

Microsoft Security | Intune | Configuration
asked 2026-07-02T09:43:30.93+00:00
Roots, Robert 0 Reputation points
answered 2026-07-02T09:44:02.4433333+00:00

AI answer

7 answers

Windows 11 - Autopilot - remove Consumer Shortcuts

Is there a configuration setting in Intune that would remove the shortcuts for Spotify,TikTok, WhatsApp, Disney+, etc that seem to appear on a fresh install of Windows 11? I have successfully used Proactive Remediation to get rid of the Consumer version…

Microsoft Security | Windows Autopilot
Microsoft Security | Intune | Configuration
Microsoft Security | Intune | Other
asked 2023-01-19T20:37:35.0733333+00:00
Matt Dillon 437 Reputation points
commented 2026-06-30T14:21:56.8566667+00:00
Sebastian Cerazy 351 Reputation points
2 answers

Intune configuration not pushed to devices

i have deployed a wifi profile to both adroid and IOS devices but months later the assignment status is still showing 0 with not success or fail or not applicable even when devices are constantly syncing.

Microsoft Security | Intune | Configuration
asked 2026-06-29T10:26:28.66+00:00
MKHULEKO THABISO NHLAMBO 45 Reputation points
commented 2026-06-30T13:34:47.5233333+00:00
MKHULEKO THABISO NHLAMBO 45 Reputation points