Intune - Not applicable settings (Device configuration profile)

Question

Hello All,

I have discovered a slightly complex issue regarding some specific browser (user based) settings when applied in a device configuration profile for windows 10+ devices (see screen shot for settings). I have found that a certain number of devices that have received this policy, have returned with setting stating they are "not applicable" further testing has suggested they were not applicable due to those devices not having the necessary windows OS updates installed. I have then updated those machines, however they still return as not applicable, despite trying every trick I know of to get them to apply properly. I have removed and re-added the policy (it appears these settings may have tattooed). I have tried introducing a policy that reverts these settings which has not worked. The only method I have found to have worked is to completely wipe the affected machines, reinstall the OS and make sure they are up to date with the correct OS updates prior to them receiving the policy. I'm wondering if anyone has found a workaround for this issue, as I have many users working completely remote, and at present I'm only able to rebuild these machines on-site, which means I will need to have 32 devices returned to the office which will be a huge logistical challenge whilst also creating considerable disruption for my users and our IT team.

Kind Regards
Kyle

Answer 1

For this issue, First of all check the update for affected device the check activation. Remove the user group from configuration policy and assign the group again. If not working remove the pc from Intune portal then join again. I believe it will work. If the solution is helpful please reply.

Answer 2

@KB Thanks for posting in our Q&A.

For this issue, it is suggested to try to update your device firstly. Then please remove your user group in current configuration profile's "Included groups" and add this user group in this "Excluded groups".

After all the above is finished, please try to create a new configuration profile (configure these settings you want) and deploy it to your user group. When configuring these settings, we suggest deploying to a pilot group.

If there is anything update, feel free to let us know.

---

If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.