Setting up and managing device configurations using Intune
The upload failure is caused by limitations and validation rules in Intune’s custom ADMX ingestion, not by an obvious XML syntax error in the snippets.
From the documented behavior of Intune ADMX import:
- Built‑in Windows policy areas must not be re‑implemented via custom ADMX
- Intune explicitly states that ADMX settings already built into Windows (those under
C:\Windows\PolicyDefinitions) are enabled through CSPs and must not be imported if the intent is to configure them. Instead, the Settings Catalog or a custom profile should be used. - Only ADMX for Win32/Desktop Bridge apps or true third‑party/custom namespaces are supported. Drive mappings under
HKCU\Network\<drive>are not part of the supported Win32/desktop app policy ingestion scenarios described.
- Intune explicitly states that ADMX settings already built into Windows (those under
- Not all registry locations are supported for custom ADMX
- Intune only allows custom ADMX to target specific registry locations supported by the Win32 and Desktop Bridge app ADMX policy ingestion mechanism.
- The documentation notes that “Not all areas of the registry can be set using custom ADMX.” If the policy writes to an unsupported hive/path, the ADMX import can fail.
- The key
HKCU\Network\Pused in the policy is not listed as a supported app policy location in the referenced Win32/desktop app ingestion guidance, so the import can fail during validation and surface as a generic error such as “Object reference not set to an instance of an object.”
- General Intune ADMX import rules that can also cause failures
- Only one ADML per ADMX and language is allowed, and the ADML language must be specified correctly during upload.
- If an ADMX references another ADMX (for example, a prerequisite like
Windows.admx) and that prerequisite is not uploaded, Intune throws a specific namespace error (NamespaceMissing:Microsoft.Policies.Windows). In this case there is no such reference, so the failure is more likely due to unsupported registry locations rather than missing prerequisites.
Given these constraints, the drive‑mapping ADMX/ADML is not a supported use of Intune’s custom ADMX import. To deploy drive mappings via Intune, use one of the supported methods instead of custom ADMX:
- Use the Settings Catalog or a custom configuration profile backed by a supported CSP.
- For scenarios that require registry edits, use a script or a Win32 app deployment rather than custom ADMX, ensuring the method complies with Intune’s supported registry paths.
References: