This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(169.60000000000002, 62%, 26%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ERV%3C/text%3E%3C/svg%3E)
Hello,
I am trying to learn more about Office Cloud Policy (config.office.com). I've found many articles comparing Cloud Policy to GPOs. And many comparing GPOs to configuration profiles in Intune. It appears the user settings available at config.office.com can also be created via Intune configuration profiles.
What are the differences between the two? In the event of a conflict, which one takes precedence?
I started here but it makes no mention: https://learn.microsoft.com/en-us/deployoffice/admincenter/overview-cloud-policy
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(230.39999999999998, 2%, 32%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ETP%3C/text%3E%3C/svg%3E)
cloud policy is assigned to the AAD user. GPOS/intune apply to domain joined/managed devices. Policy overrides all.
I would recommend, if you have enrolled your devices to Intune and they are already managed, prioritize the Intune control first and leave the Office Cloud Policy un-touched. I believe this office cloud policy is for light management when you have nothing else to work with :)
Thank you for your response! The motivation to evaluate Office Cloud Policy is coming from allowing BYOD not enrolled in Intune. Am I understanding the other post correctly that precedence between Cloud policy, Intune controls and GPO is Cloud Policy>Intune>GPO?
Currently we don't have any Intune controls stood up. The plan is to leave existing GPOs in place as-is on domain devices and configure Cloud Policy similarly to control BYOD.