Deny log on through Intune policy

Question

Hello All,

I am trying to apply the policy for the Deny log-on through Intune policy, however, it is restricting all the users on the machine where the policy is applied. How can I deny log-on for only users who are specified in the Intune Policy? Thanks.

Answer 1

Are you applying the Device Configuration Profile Policy to the Entra Security Group containing devices or users? Please note that if applied to devices, it will affect all users signing into the target device.

If you wish to ensure that the policy is only applicable to specific users, create an Entra Security Group, add the relevant users, and target this Entra Security Group in the Intune Policy.

Hope this helps and answers your query.

---If the response is helpful, please click "Accept Answer" and upvote it.---

Answer 2

@Amit Kumar Singh,Thanks for posting in Q&A.

From your description, I know that you want to deny log-on for specific users via Intune policy.

Based on my research, you can refer the method @JatinMakhija mentioned.

Hope this can be helpful.

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.