Applying Configuration profiles to a local user

Question

We have enrolled a device in Microsoft Endpoint Manager admin center, have assigned a custom app to it successfully, and have assigned a Configuration Profile to it. The Configuration Profile was only partially successful. We need the settings in the Configuration Profile to only apply to the local non-admin account on the device and not to the local admin account on the device, but the Configuration Profile only sets the local admin account’s settings on the device and not the local non-admin account’s settings. Is this possible on Intune? And if so how do we go about doing it?
Thanks

Answer 1

Hello @Sebastian Urena Nembhard ,

Thank you for posting your query on Microsoft Q&A. Intune policies recognize only Azure AD security groups. As a result, exclusion on inclusion via assignment is possible for them. However, it won't be possible to apply a policy specific to a specific non-admin local group.

As a workaround I would suggest promoting 1 AAD user as local admin on all AAD joined machines and exclude it from the policy.

Please do let me know if you have any further queries in the comments section.

Thanks,
Akshay Kaushik

Please "Accept the answer", "Upvote" and rate your experience if the suggestion works as per your business need. This will help us and others in the community as well.