Error in System account when setting Windows Hello configuration profile

Question

Hello, I'm facing a problem and there isn't new information on it online.

I have set a configuration profile for Windows Hello in Intune and received Assignment failures on a couple of devices.

when checking it seems like the main user got the policy and the System account is the one that failed.

how do I disable the policy for the System account?

Answer 1

@Naamah Ninio, Thanks for posting in Q&A. In general, for configuration profile assign, we use device groups when you don't care who's signed in on the device, or if anyone signs in. You want your settings to always be on the device. We use user groups when you want your settings and rules to always go with the user, whatever device they use.

https://learn.microsoft.com/en-us/mem/intune/configuration/device-profile-assign#user-groups-vs-device-groups

For your situation, it seems you have assigned to device group. So the system account also shows applying the policy. To avoid this, you can assign the configuration policy to user group instead to see if the result will be different.

Hope the above information can help.

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.