2,227 questions

Sort by: Updated
Updated Created Answers
1 answer

Always On VPN Device Tunnel deployed as device configuration profile during Autopilot (ProfileXML)

Hi, I have successfully deployed Always On VPN Device Tunnel as device configuration profile during Autopilot (ProfileXML). Its only purpose is to automatically establish line of sight to domain controllers in Azure (P2S session to Azure VPN Gateway)…

Microsoft Security | Intune | Configuration
asked 2026-10-27T16:27:53.36+00:00
Bojan Zivkovic 651 Reputation points
edited the question 2026-10-27T16:35:02.9433333+00:00
Bojan Zivkovic 651 Reputation points
2 answers One of the answers was accepted by the question author.

File getting copied to SysWow64 instead of System32

We have created a policy to copy screensaver file in System32 folder. But when we are applying the policy the file is getting copied to SysWow64. The command we used is xcopy /s /t /q /y . \abc.scr C:\windows\system32

Microsoft Security | Intune | Configuration
asked 2023-10-10T05:14:54.05+00:00
Anonymous
commented 2026-10-26T08:54:49.6933333+00:00
Sebastian Cerazy 351 Reputation points
1 answer

Microsoft Intune 401 Errors – RBAC, Autopilot, and Scope Tags

Hello everyone, I'm experiencing persistent 401 "You do not have access" errors in Microsoft Intune. Issues: Cannot create Autopilot deployment profiles or scope tags (buttons greyed out). Cannot create custom Intune RBAC roles (401…

Microsoft Security | Intune | Configuration
asked 2026-10-25T03:20:55.29+00:00
Ahmad Khalid Azizi 0 Reputation points
answered 2026-10-25T03:22:42.8766667+00:00

AI answer

1 answer

Which permissions/roles would I need to have read-only access to all features related to Endpoint(s) on Microsoft Defender?

We currently have security reader, security operator (PIM), Microsoft Defender XDR security reader permissions, and the Intune read only operator. We also have Core Security settings (read) in Defender Unified RBAC. However, members of our team cannot…

Microsoft Security | Intune | Configuration
asked 2026-10-19T17:41:32.1333333+00:00
Parv Choksi 0 Reputation points
edited the question 2026-10-19T17:45:37.4466667+00:00
Parv Choksi 0 Reputation points
2 answers

How to fix intune wifi policy misconfiguration?

We got new ipads meant for kiosk so i was able to add one of them to our system fairly easily. I forgot to make a configuration to ensure that the ipads stay on a certain wifi network. After i made the configuration I think it was wrong since the iPad…

Microsoft Security | Intune | Configuration
asked 2026-10-08T18:41:11.25+00:00
Bobby Booker 0 Reputation points
answered 2026-10-11T16:19:47.4533333+00:00
Anthony Buhnerkemper 0 Reputation points
1 answer

Packaging interactive software for the company portal without user interaction

Hello, I want to make software available via the company portal that requires interaction. For example, that you specify an installation path, etc. An example software would be Docker Desktop. The installation always fails although it is at 100%.…

Microsoft Security | Intune | Configuration
Microsoft Security | Intune | Application management
Microsoft Security | Intune | Enrollment
Microsoft Security | Intune | Other
asked 2024-09-05T13:54:30.46+00:00
Anonymous
commented 2026-10-09T19:40:27.6533333+00:00
Atoofa Shaikh | TechEUC 0 Reputation points
1 answer

MD-102 practice assessment: Is the maximum number of Office app policies answer outdated?

Hi, I am studying for MD-102 and working through the practice assessment on Microsoft Learn. Could someone help clarify the following question? You have a Microsoft 365 E5 subscription that contains the following groups: Group1: Security group Group2:…

Microsoft Security | Intune | Configuration
asked 2026-10-06T18:43:34.8133333+00:00
Ken Lam 0 Reputation points
commented 2026-10-06T19:14:54.98+00:00
Ken Lam 0 Reputation points
1 answer

TMP compliance issue

we are getting this error; do we need to enable tpm on device.

Microsoft Security | Intune | Configuration
asked 2026-09-29T09:21:37.3933333+00:00
Megha Devrani 0 Reputation points
commented 2026-09-29T19:23:00.03+00:00
Rahul Jindal 11,731 Reputation points
0 answers

Assigned Access - Are standard accounts affected?

I'm a 3rd Line IT Technician within the education sector covering 40+ schools in the UK. We have recently began the move to Intune for our student devices (after a successful staff transition) and I'm currently trying to find a solution on how to…

Microsoft Security | Intune | Configuration
asked 2026-09-29T18:42:30.6466667+00:00
Sam Collins 0 Reputation points
1 answer

How can I block AnyDesk completely using Microsoft Intune / Microsoft 365 Admin Center?

Hi Microsoft Community, I am managing devices through Microsoft Intune and would like to completely prevent users from using AnyDesk on company-managed Windows devices. The requirement is to: Block AnyDesk if it is already installed. Prevent users…

Microsoft Security | Intune | Configuration
asked 2026-09-28T04:33:32.7666667+00:00
Thishni Perera 75 Reputation points
answered 2026-09-28T15:09:07.36+00:00
Abinesh Magudeeswaran 230 Reputation points Student Ambassador
1 answer

Intune: Policies or Profiles?

I've been studying Intune and Entra for a long time now, but something that always bothered me is that the use of "Policies" versus "Profiles" is scattered and inconsistent. The most ergregious examples are the "Feature…

Microsoft Security | Intune | Configuration
asked 2026-09-25T15:31:44.1333333+00:00
M. Jeffrey 0 Reputation points
answered 2026-09-25T17:17:25.4833333+00:00
Marcin Policht 112K Reputation points MVP Volunteer Moderator
0 answers

NDES Service Account Installation Failure – Interactive Logon Policy Conflict

We are encountering an installation failure while deploying the NDES role using a dedicated service account. The configuration fails with the error: "Logon Failure: the user has not been granted the requested logon type at this computer" Our…

Microsoft Security | Intune | Configuration
asked 2026-09-22T07:12:18.9+00:00
Sreeram Raju 40 Reputation points
1 answer

Intune On-Demand Proactive Remediation API Reliability for Large-Scale Usage

Hi Team, We are testing the Intune On-Demand Proactive Remediation API: POST /deviceManagement/managedDevices/{managedDeviceId}/initiateOnDemandProactiveRemediation In our environment, the remediation package works correctly, and the API generally…

Microsoft Security | Intune | Configuration
asked 2026-09-11T14:49:34.2933333+00:00
Swahela Mulla 100 Reputation points
edited the question 2026-09-11T15:02:37.8833333+00:00
Swahela Mulla 100 Reputation points
2 answers

{{OnPremisesSecurityIdentifier}} strong certificate binding enforcement

We have this: https://support.microsoft.com/en-gb/topic/kb5014754-certificate-based-authentication-changes-on-windows-domain-controllers-ad2c23b0-15d8-4340-a468-4d4f3b188f16 Then we have…

Microsoft Security | Intune | Configuration
asked 2025-02-26T10:00:30.62+00:00
Sebastian Cerazy 351 Reputation points
commented 2026-09-10T16:54:18.9366667+00:00
Sebastian Cerazy 351 Reputation points
1 answer

Windows BYOD Edge MAM enrollment blocked by Conditional Access policy requiring compliant devices

We are implementing a Windows BYOD solution using Microsoft Intune App Protection Policies (MAM) for Microsoft Edge and Conditional Access. Expected behavior Approved users in the BYOD Users group should be able to access Microsoft 365 resources from…

Microsoft Security | Intune | Configuration
asked 2026-09-01T05:36:02.5466667+00:00
Chitranjan Singh 0 Reputation points
answered 2026-09-01T05:36:28.2766667+00:00

AI answer

4 answers

Inunte-macOS custom vpn configuration

I am trying to create a custom VPN profile for macOS in Intune portal, not using any third-party VPN client and, trying to use the in-built mac VPN app "com.apple.vpn.managed" to connect but it fails not getting any response back neither from…

Microsoft Security | Intune | Configuration
asked 2021-09-06T20:25:11.543+00:00
tn-57-gs 31 Reputation points
commented 2026-08-31T15:12:35.24+00:00
Félix Pratt-Damico 0 Reputation points
1 answer

‎Intune Dell BIOS Configuration – Status Mismatch and Password Sync Issue‎

Hello, I am using the “BIOS configurations and other settings” configuration profile in Microsoft Intune to manage BIOS settings and passwords. I am currently experiencing an issue on a laptop where there is a mismatch between the status reported in…

Microsoft Security | Intune | Configuration
asked 2026-05-14T12:49:41.3133333+00:00
Kyuzo88 111 Reputation points
commented 2026-08-18T22:50:53.5533333+00:00
Liss, Drew 0 Reputation points
2 answers One of the answers was accepted by the question author.

How to enforce Edge Browser to stop using Personal and only allows Work account to sync?

Would it be possible to enforce and only allow the Microsoft Edge browser to log in and open as a Work Account instead of as a Personal account? My corporate workstation has been configured as Hybrid Azure AD Joined and managed by Intune, so I wonder if…

Windows for business | Windows Client for IT Pros | Directory services | Active Directory
Microsoft Security | Intune | Configuration
Microsoft Security | Intune | Grouping
Microsoft Security | Intune | Other
Microsoft Edge | Microsoft Edge development
asked 2024-09-16T04:40:37.32+00:00
EnterpriseArchitect 6,416 Reputation points
commented 2026-08-14T11:51:19.7766667+00:00
Jean-Seb 25 Reputation points
2 answers

Addressing 'Disable JavaScript on Adobe Reader DC

Hello All, Can somebody please assist. How do I Address Defender Security Recommendation 'Disable JavaScript on Adobe DC. I have 100 devices that needs remediation, is there a PS script I can run or another option?

Microsoft Security | Intune | Configuration
asked 2025-03-05T15:28:15.29+00:00
Jay Tee 40 Reputation points
commented 2026-08-09T09:01:57.9966667+00:00
Darren Milne 0 Reputation points
1 answer

Puah Wifi Profile from Intune

I push wifi configuration from intune, the setting will push wifi profile to auto connect. Currently i assign to all devices and now i want to exclude from a group. When we modify the assigment scope to exclude the group-A for example then the existing…

Microsoft Security | Intune | Configuration
asked 2026-08-03T11:57:47.1366667+00:00
Handian Sudianto 7,616 Reputation points
answered 2026-08-03T11:58:02.9066667+00:00

AI answer