MTR on Windows received policies - how to remove?

Question

Hi, we have around 90 Microsoft Teams Rooms (Crestron) and they are actually excluded from our InTune Policies Groups by name tag (all hosts, beginning with "MTR-" are excluded). We don't know how, but some received our standard policies for clients and the stayed.

How can I remove our MTRs from this policies and has someone an idea how this could happen?

Thanks

Answer 1

Hello Wagner

Can you try this steps

1. Remove MTRs from InTune Policies Group:

• Go to the InTune portal and sign in using your administrator credentials.
• Navigate to the Device Configuration section.
• Find the policies that were mistakenly applied to the MTRs and remove them from the Device Configuration Profiles.
• Verify that the MTRs are no longer included in any targeted policies.

1. Troubleshooting how MTRs received standard policies:

• Check the device properties in InTune to see if any manual policy assignments were made to those specific devices.
• Audit the assignment history for the policies applied to the MTRs to determine when and how they were assigned.
• Analyze any recent changes in your policy configuration or device groups that may have inadvertently included the MTRs.
• Review any automated rules or policies that might have overridden the exclusion based on the name tag.
• Remove MTRs from InTune Policies Group: Go to the InTune portal and sign in using your administrator credentials.

   Navigate to the Device Configuration section.
  
      Find the policies that were mistakenly applied to the MTRs and remove them from the Device Configuration Profiles.
  
         Verify that the MTRs are no longer included in any targeted policies.
  
           1. Troubleshooting how MTRs received standard policies:
  
            Check the device properties in InTune to see if any manual policy assignments were made to those specific devices.
  
            Audit the assignment history for the policies applied to the MTRs to determine when and how they were assigned.
  
            Analyze any recent changes in your policy configuration or device groups that may have inadvertently included the MTRs.
  

  Review any automated rules or policies that might have overridden the exclusion based on the name tag.

Answer 2

@Wagner, Christian,Thanks for posting in Q&A.

From your description, I know you want to remove MTRs from policy.

Based on my research, device configuration policies are like tattoos, once a policy is applied it cannot be easily cancelled, however, you can configure an opposite setting to override the original, for example, if you enable a setting, you can set it to disabled or unconfigured to bring it back to its original setting.

As for why some's received policy and applied, you can go through the reports related to the filter to check where the filter doesn't match, and check evaluate the results.

https://learn.microsoft.com/en-us/mem/intune/fundamentals/filters-reports-troubleshoot#filter-evaluation-report-for-devices

Moreover, filters can only be set to filter applications or devices, for specific filtering rules you can refer to the following link.

https://learn.microsoft.com/en-us/mem/intune/fundamentals/filters-device-properties

Hope above information can help you.

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.