Hello, When we use traditional GPO, we can issue 'rsop.msc' to see which GPO applied on the client, how we can check which policy applied on the client side if the client connected to the intune? Also in traditional GPO we can set order of every GPO, how in intune?

@Handian Sudianto, Thanks for posting in Q&A. In Intune portal, to check the policies applied to one user, we can go to Troubleshooting + support > Troubleshoot., enter the user name, it will list the policies applied to this user. https://learn.microsoft.com/en-us/troubleshoot/mem/intune/device-configuration/troubleshoot-policies-in-microsoft-intune To check policies applied to one device, we can find the information under device-> device configuration: On device side, we can check the Advanced diagnostic Report to check the policies applied. Meanwhile, we can collect DeviceManagement-Enterprise-Diagnostic-Provider event log when there's error to deploy any device configuration policy. https://learn.microsoft.com/en-us/windows/client-management/mdm-collect-logs#download-the-mdm-diagnostic-information-log-from-windows-devices Hope the above information can help. If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment". Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Check Intune Applied Policy

Accepted answer

Crystal-MSFT 51,221 Reputation points Microsoft Vendor

2024-01-23T07:30:17.19+00:00

@Handian Sudianto, Thanks for posting in Q&A. In Intune portal, to check the policies applied to one user, we can go to Troubleshooting + support > Troubleshoot., enter the user name, it will list the policies applied to this user.

https://learn.microsoft.com/en-us/troubleshoot/mem/intune/device-configuration/troubleshoot-policies-in-microsoft-intune

To check policies applied to one device, we can find the information under device-> device configuration:

On device side, we can check the Advanced diagnostic Report to check the policies applied. Meanwhile, we can collect DeviceManagement-Enterprise-Diagnostic-Provider event log when there's error to deploy any device configuration policy.

https://learn.microsoft.com/en-us/windows/client-management/mdm-collect-logs#download-the-mdm-diagnostic-information-log-from-windows-devices

Hope the above information can help.

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.
Please sign in to rate this answer.

2 people found this answer helpful.
Crystal-MSFT 51,221 Reputation points Microsoft Vendor

2024-01-25T01:52:58.8366667+00:00

@Handian Sudianto, Hope the above information can help. if there's anything else we can help, feel free to let us know.

Richard R 0 Reputation points

2024-10-29T19:15:29.3833333+00:00

How do you find InTune pushed Security Policy settings locally on a windows box? Need to be able to verify on the local machine that a policy that was just pushed out was indeed applied locally?

Crystal-MSFT 51,221 Reputation points Microsoft Vendor

2024-10-30T02:30:44.4+00:00

@Richard R, On Intune portal, we can check under the report to see if it is applied on device side.

On device side, if the setting changes registry key, you can check if the registry key is changed.

Meanwhile, you can also collect diagnostic report on device side under Settings>Accounts>Access work or school, find the Account click info to see if the setting is applied.

Richard R 0 Reputation points

2024-10-31T12:21:35.3733333+00:00

I need to verify a policy is applied on the workstation side (Win11). Where are the registry settings for intune policies on the workstation side that indicate whether a policy is active/applied? Is there a registry setting list that shows each Intune policy and where in the local workstations registry it would indicate that the policy is enabled?

Richard R 0 Reputation points

2024-10-31T12:23:03.5666667+00:00

As I mentioned, I need to validate if a policy applied on the workstation side, NOT from intune.

I need to verify if a policy is applied on the workstation side (Win11). Where are the registry settings for intune policies on the workstation side that indicate whether a policy is active/applied? Is there a registry setting list that shows each Intune policy and where in the local workstations registry it would indicate that the policy is enabled?

Richard R 0 Reputation points

2024-10-31T12:41:37.7166667+00:00

Specifically Security Policies like removable media and ASR rules. Where those types of Registry settings are located locally on a workstation.

Crystal-MSFT 51,221 Reputation points Microsoft Vendor

2024-11-01T05:32:13.8133333+00:00

@Richard R, For the registry setting this is designed by windows. Currently, there's no official document describe the registry keys for all settings.

Here is one article I find describe the registry key for removable storage. You can read it as a reference.

https://techcommunity.microsoft.com/t5/core-infrastructure-and-security/mde-device-control-leveraging-reusable-settings-in-intune/ba-p/3905072
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

Check Intune Applied Policy

0 additional answers

Your answer