Error in System account when setting Windows Hello configuration profile

Naamah Ninio 20 Reputation points

Hello, I'm facing a problem and there isn't new information on it online.

I have set a configuration profile for Windows Hello in Intune and received Assignment failures on a couple of devices.

when checking it seems like the main user got the policy and the System account is the one that failed.

how do I disable the policy for the System account?

Microsoft Identity Manager
Microsoft Identity Manager
A family of Microsoft products that manage a user's digital identity using identity synchronization, certificate management, and user provisioning.
482 questions
Microsoft Intune
Microsoft Intune
A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.
3,314 questions
0 comments No comments
{count} votes

Accepted answer
  1. Crystal-MSFT 32,811 Reputation points Microsoft Vendor

    @Naamah Ninio, Thanks for posting in Q&A. In general, for configuration profile assign, we use device groups when you don't care who's signed in on the device, or if anyone signs in. You want your settings to always be on the device. We use user groups when you want your settings and rules to always go with the user, whatever device they use.

    For your situation, it seems you have assigned to device group. So the system account also shows applying the policy. To avoid this, you can assign the configuration policy to user group instead to see if the result will be different.

    Hope the above information can help.

    If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

0 additional answers

Sort by: Most helpful