{"items":[{"href":"./","toc_title":"Microsoft Intune documentation"},{"children":[{"children":[{"displayName":"what is intune, mdm, mam, android, ios, ipados, macos, windows","href":"fundamentals/what-is-intune","toc_title":"What is Microsoft Intune"},{"displayName":"identities, devices, apps, pillars, user affinity, RBAC, scope tags, MDM, MAM, MAM-WE, BYOD, app lifecycle, device groups, conditional access, zero trust","href":"fundamentals/core-concepts","toc_title":"Core concepts"},{"displayName":"architecture, diagram, components, design, family, products, suite, on-premises","href":"fundamentals/architecture","toc_title":"Architecture"},{"displayName":"plans, intune suite, add-ons, premium, trial, service description, advanced capabilities","href":"fundamentals/advanced-capabilities","toc_title":"Intune advanced capabilities"},{"displayName":"licensing, plans, pricing, EMS, education, configuration manager, device-only, unlicensed admins, confirm license, language support","href":"fundamentals/licensing","toc_title":"Microsoft Intune licensing"}],"expanded":true,"toc_title":"Microsoft Intune overview"},{"children":[{"displayName":"trial, free","href":"fundamentals/tutorial-admin-center-walkthrough","toc_title":"Walkthrough the admin center"},{"children":[{"href":"fundamentals/try-overview","toc_title":"Try Intune tasks overview"},{"displayName":"tenant; trial; get started, start; help; MDM","href":"fundamentals/free-trial-sign-up","toc_title":"Step 1 - Sign up for a free Intune trial"},{"href":"fundamentals/tenant-administration/quickstart-create-user","toc_title":"Step 2 - Create a user and assign a license"},{"href":"fundamentals/tenant-administration/quickstart-create-group","toc_title":"Step 3 - Create a group"},{"href":"device-enrollment/windows/quickstart-automatic-mdm","toc_title":"Step 4 - Set up automatic enrollment"},{"href":"device-enrollment/windows/quickstart-first-device","toc_title":"Step 5 - Enroll your Windows device"},{"href":"device-security/compliance/quickstart-password-compliance-android","toc_title":"Step 6 - Create a device compliance policy"},{"href":"device-security/compliance/quickstart-noncompliance-notification","toc_title":"Step 7 - Send notifications to noncompliant devices"},{"href":"app-management/deployment/quickstart-add-assign","toc_title":"Step 8 - Add and assign an app"},{"href":"app-management/protection/quickstart-create-assign-policy","toc_title":"Step 9 - Create and assign an app protection policy"},{"href":"fundamentals/role-based-access-control/quickstart-custom-role","toc_title":"Step 10 - Create and assign a custom role"},{"href":"device-configuration/templates/quickstart-email-profile","toc_title":"Step 11 - Create a device profile"}],"toc_title":"Try Intune tasks"},{"children":[{"href":"solutions/tutorials/protect-email-enrolled-devices","toc_title":"Protect email on managed devices"},{"href":"solutions/tutorials/protect-email-unmanaged-devices","toc_title":"Protect email on unmanaged devices"},{"href":"app-management/configuration/tutorial-configure-slack","toc_title":"Configure Slack for Intune"},{"href":"/intune/device-enrollment/apple/setup-just-in-time-registration","toc_title":"Set up just in time registration"},{"href":"/intune/device-enrollment/apple/tutorial-automated-ios","toc_title":"Automated device enrollment for iOS/iPadOS"},{"displayName":"admx, administrative template, gpo, windows","href":"/intune/device-configuration/settings-catalog/tutorial-group-policy-migration","toc_title":"Migrate Group Policy to settings catalog"}],"toc_title":"Tutorials"}],"toc_title":"Evaluate and try"},{"children":[{"displayName":"help, get started, mdm, mam, android, ios, ipados, macos, windows","href":"fundamentals/planning-guide","toc_title":"Planning guide"},{"children":[{"displayName":"software updates, android open source project, supported devices","href":"fundamentals/aosp-supported-devices","toc_title":"AOSP supported devices"}],"displayName":"software updates, android, ios, ipados","href":"fundamentals/ref-supported-platforms","toc_title":"Supported platforms and browsers"},{"displayName":"deployment, mdm, mam, android, ios, ipados, macos, windows","href":"fundamentals/protection-configuration-levels","toc_title":"Protection and configuration levels"},{"href":"fundamentals/zero-trust","toc_title":"Zero Trust with Microsoft Intune"},{"displayName":"deployment, zero trust, security, compliance, conditional access","href":"fundamentals/zero-trust-deployment","toc_title":"Zero Trust deployment approach"},{"href":"fundamentals/servicing-information","toc_title":"Service release information"},{"children":[{"href":"solutions/windows-virtual-machines","toc_title":"Windows VMs with Intune"},{"href":"solutions/azure-virtual-desktop","toc_title":"Azure Virtual Desktop with Intune"},{"href":"solutions/azure-virtual-desktop-multi-session","toc_title":"Azure Virtual Desktop multi-session"}],"toc_title":"Virtual machines"}],"toc_title":"Plan your deployment"},{"children":[{"displayName":"help, get started, migrate, mdm, mam, android, ios, ipados, macos, windows","href":"fundamentals/setup-migration","toc_title":"Migration guide"},{"children":[{"displayName":"migrate, mdm, office, windows","href":"fundamentals/migrate-from-other-mdm","toc_title":"Move from Microsoft 365 device management"},{"children":[{"displayName":"migrate, mdm, office, windows","href":"fundamentals/ref-policy-map-access-requirements","toc_title":"Access requirements policy mapping"},{"displayName":"migrate, mdm, office, windows","href":"fundamentals/ref-policy-map-configurations","toc_title":"Configurations policy mapping"},{"displayName":"migrate, mdm, office, windows","href":"fundamentals/ref-policy-map-miscellaneous","toc_title":"Miscellaneous policy mapping"}],"toc_title":"Policy mapping"}],"toc_title":"Move from Basic Mobility and Security"}],"toc_title":"Migrate to Intune"},{"children":[{"displayName":"mdm, mam, android, ios, ipados, macos, windows","href":"fundamentals/get-started","toc_title":"Get started with your deployment"},{"displayName":"deployment, mdm, mam, android, ios, ipados, macos, windows","href":"fundamentals/deploy-setup-step-1","toc_title":"Step 1 - Set up Intune subscription"},{"displayName":"deployment, mdm, mam, android, ios, ipados, macos, windows","href":"fundamentals/deploy-protect-apps-step-2","toc_title":"Step 2 - Add, configure, and protect apps"},{"displayName":"deployment, mdm, mam, android, ios, ipados, macos, windows","href":"fundamentals/deploy-compliance-step-3","toc_title":"Step 3 - Create compliance policies"},{"displayName":"deployment, mdm, mam, android, ios, ipados, macos, windows","href":"fundamentals/deploy-configuration-step-4","toc_title":"Step 4 - Configure device features and settings"},{"displayName":"deployment, mdm, android, ios, ipados, macos, windows","href":"device-enrollment/enroll-devices","toc_title":"Step 5 - Enroll devices"}],"toc_title":"Deploy Intune"},{"children":[{"href":"fundamentals/platform-guide-windows","toc_title":"Windows"},{"href":"fundamentals/platform-guide-android","toc_title":"Android"},{"href":"fundamentals/platform-guide-ios-ipados","toc_title":"iOS/iPadOS"},{"href":"fundamentals/platform-guide-macos","toc_title":"macOS"},{"href":"fundamentals/platform-guide-linux","toc_title":"Linux"},{"href":"solutions/windows-holographic","toc_title":"Windows Holographic"}],"toc_title":"Platform deployment guides"},{"children":[{"children":[{"href":"fundamentals/endpoints","toc_title":"Intune endpoints"},{"href":"fundamentals/endpoints-china","toc_title":"China endpoints"},{"href":"fundamentals/endpoints-us-government","toc_title":"Intune US government endpoints"}],"toc_title":"URLs and IP address endpoints"},{"children":[{"href":"fundamentals/account-sign-up","toc_title":"Sign in to Intune"},{"href":"fundamentals/configure-custom-domain","toc_title":"Configure domains"},{"href":"fundamentals/tenant-administration/add-users","toc_title":"Add users"},{"href":"fundamentals/tenant-administration/add-groups","toc_title":"Add groups"},{"href":"fundamentals/assign-licenses","toc_title":"Assign licenses"},{"href":"fundamentals/setup-mdm-authority","toc_title":"Set the MDM authority"}],"toc_title":"Set up Intune subscription"},{"children":[{"href":"fundamentals/role-based-access-control/overview","toc_title":"Role-based access control overview"},{"href":"fundamentals/role-based-access-control/ref-built-in-roles","toc_title":"Built-in roles permissions reference"},{"href":"fundamentals/role-based-access-control/assign-role","toc_title":"Assign a role to a user"},{"href":"fundamentals/role-based-access-control/create-custom-role","toc_title":"Create a custom role"},{"href":"fundamentals/role-based-access-control/scope-tags","toc_title":"Use scope tags to determine what admins can see"},{"displayName":"distributed IT, many admins, scale, guidelines","href":"fundamentals/scale-guidelines","toc_title":"Determine admin structure"},{"displayName":"multi-admin approval, maa","href":"fundamentals/role-based-access-control/multi-admin-approval","toc_title":"Configure multiple admin approvals"}],"toc_title":"Manage roles and permissions"},{"href":"fundamentals/tenant-attach","toc_title":"Tenant attach"},{"displayName":"android, ios, ipados, macos, windows","href":"fundamentals/policy-sets","toc_title":"Use policy sets to group policies together"},{"displayName":"assignment filter, dynamic group, static group, virtual group, enrollment time grouping, targeting","href":"fundamentals/choose-targeting-method","toc_title":"Choose the right targeting method"},{"children":[{"displayName":"assignment filter, android, ios, ipados, macos, windows","href":"fundamentals/filters/overview","toc_title":"Create an assignment filter"},{"displayName":"assignment filter, android, ios, ipados, macos, windows","href":"fundamentals/filters/ref-device-properties","toc_title":"Assignment filter properties"},{"displayName":"assignment filter, android, ios, ipados, macos, windows","href":"fundamentals/filters/ref-supported-workloads","toc_title":"Supported workloads"},{"displayName":"assignment filter, android, ios, ipados, macos, windows","href":"fundamentals/filters/troubleshoot","toc_title":"Reporting and conflict resolution"},{"displayName":"assignment filter, android, ios, ipados, macos, windows","href":"fundamentals/filters/performance-recommendations","toc_title":"Performance recommendations"}],"toc_title":"Use assignment filters"},{"children":[{"href":"device-security/ref-zero-trust-security","toc_title":"Configure security recommendations using Zero Trust"},{"href":"device-security/ref-zero-trust-tenant","toc_title":"Secure tenants"},{"href":"device-security/ref-zero-trust-devices","toc_title":"Secure devices"},{"href":"device-security/ref-zero-trust-data","toc_title":"Secure data"}],"toc_title":"Configure security recommendations using Zero Trust"}],"toc_title":"Set up Microsoft Intune"}],"href":"fundamentals/","toc_title":"Get started"},{"children":[{"href":"whats-new/","toc_title":"What\u0027s new"},{"href":"whats-new/in-development","toc_title":"Features in development"},{"href":"/intune/whats-new#notices","toc_title":"Important notices"},{"href":"fundamentals/public-preview","toc_title":"Public preview"}],"toc_title":"What\u0027s new"},{"children":[{"displayName":"COD; BYOD; DEM; ADE; USB-SA; USB-Direct; co-management; GPO","href":"device-enrollment/guide","toc_title":"Device enrollment overview"},{"children":[{"children":[{"displayName":"multi-factor; enrollment; MFA; verification; Conditional Access","href":"device-enrollment/configure-multifactor-authentication","toc_title":"Configure multifactor authentication"},{"href":"device-enrollment/restrictions","toc_title":"Enrollment restrictions overview"},{"href":"device-enrollment/limits-intune-entra","toc_title":"Intune vs. Microsoft Entra device limits"},{"href":"device-enrollment/create-platform-restrictions","toc_title":"Create device platform restrictions"},{"href":"device-enrollment/create-device-limit-restrictions","toc_title":"Create device limit restrictions"},{"displayName":"COD; corporate owned; IMEI; device ownership; serial","href":"device-enrollment/add-corporate-identifiers","toc_title":"Configure corporate identifiers"},{"displayName":"intune; enrollment; terms and conditions; policy","href":"device-enrollment/create-terms-and-conditions","toc_title":"Create terms and conditions"}],"toc_title":"All-platform prerequisites"},{"children":[{"displayName":"digital; certificates; notifications; token; PEM; automated device enrollment; user enrollment; device enrollment","href":"device-enrollment/apple/create-mdm-push-certificate","toc_title":"Create Apple MDM push certificate"},{"displayName":"device management; apple business manager; apple school manager","href":"device-enrollment/apple/setup-account-service-access","toc_title":"Configure Apple account service access"}],"toc_title":"Apple prerequisites"},{"children":[{"displayName":"chrome os; connector; device management; google admin","href":"device-enrollment/configure-chrome-enterprise-connector","toc_title":"Configure Chrome Enterprise connector"}],"toc_title":"Android and ChromeOS prerequisites"},{"children":[{"displayName":"DEM; bulk enrollment; company portal; Azure AD; join; limitations","href":"device-enrollment/setup-enrollment-manager","toc_title":"Configure enrollment manager"},{"href":"device-enrollment/setup-notifications","toc_title":"Configure enrollment notifications"},{"displayName":"enrollment time grouping; security groups; Entra","href":"device-enrollment/setup-time-grouping","toc_title":"Configure enrollment time grouping"}],"toc_title":"Enrollment operations and notifications"}],"toc_title":"Prerequisites and configuration"},{"children":[{"href":"device-enrollment/windows/guide","toc_title":"Windows enrollment guide"},{"href":"device-enrollment/windows/enable-automatic-mdm","toc_title":"Set up automatic enrollment"},{"href":"device-enrollment/windows/attestation","toc_title":"Windows Enrollment Attestation"},{"href":"device-enrollment/windows/setup-status-page","toc_title":"Set up Enrollment Status Page"},{"href":"device-enrollment/windows/create-bulk-package","toc_title":"Create bulk enrollment package"},{"href":"device-enrollment/windows/enable-backup-restore","toc_title":"Enable backup and restore"},{"href":"device-enrollment/windows/create-cname-autodiscovery","toc_title":"Create CNAME records for autodiscovery"},{"href":"/autopilot/windows-autopilot-hybrid","toc_title":"Set up Intune Connector for Active Directory"}],"toc_title":"Set up Windows enrollment"},{"children":[{"displayName":"COBO","href":"device-enrollment/android/guide","toc_title":"Android enrollment guide"},{"href":"device-enrollment/android/connect-managed-google-play","toc_title":"Connect Intune to Managed Google Play"},{"children":[{"href":"device-enrollment/android/connect-managed-google-play","toc_title":"Prerequisite - Connect Intune to Android Enterprise"},{"displayName":"COBO; staged enrollment","href":"device-enrollment/android/device-staging","toc_title":"Device staging overview"},{"children":[{"href":"device-enrollment/android/enterprise-work-profile","toc_title":"Overview"},{"href":"device-enrollment/android/setup-personal-work-profile","toc_title":"Work profile for personal devices"},{"href":"device-enrollment/android/android-management-api-overview","toc_title":"Android Management API for personal devices"},{"href":"device-enrollment/android/redo-workplace-join-android","toc_title":"Redo Workplace Join for Android Enterprise devices"},{"href":"device-enrollment/android/setup-corporate-work-profile","toc_title":"Work profile for corporate-owned devices"}],"toc_title":"Set up work profile management"},{"href":"device-enrollment/android/setup-dedicated","toc_title":"Set up enrollment for dedicated devices"},{"href":"device-enrollment/android/setup-fully-managed","toc_title":"Set up enrollment for fully managed devices"},{"href":"device-enrollment/android/ref-corporate-methods","toc_title":"Enroll corporate-owned devices"}],"toc_title":"Work profile enrollment"},{"children":[{"href":"device-enrollment/android/setup-aosp-corporate-userless","toc_title":"Corporate-owned, userless"},{"href":"device-enrollment/android/setup-aosp-corporate-user-associated","toc_title":"Corporate-owned, user-associated"}],"toc_title":"AOSP enrollment solutions"},{"children":[{"href":"device-enrollment/android/manage-device-administrator","toc_title":"Set up device administrator enrollment"},{"href":"device-enrollment/android/migrate-device-admin-to-work-profile","toc_title":"Migrate to work profile management"},{"href":"device-enrollment/android/migrate-to-application-management","toc_title":"Migrate to app management without enrollment"}],"toc_title":"Device administrator (deprecated)"}],"toc_title":"Set up Android enrollment"},{"children":[{"href":"device-enrollment/apple/guide-ios-ipados","toc_title":"Get started with Apple mobile enrollment"},{"children":[{"href":"device-enrollment/apple/overview-automated-enrollment-apple","toc_title":"Automated Device Enrollment overview"},{"href":"device-enrollment/apple/setup-apple-token","toc_title":"Set up an enrollment token"},{"href":"device-enrollment/apple/ref-automated-authentication-methods","toc_title":"Choose authentication method"},{"href":"device-enrollment/apple/setup-automated-ios","toc_title":"Create an enrollment policy for iOS/iPadOS"},{"href":"device-enrollment/apple/setup-automated-tv-os","toc_title":"Create an enrollment policy for tvOS"},{"href":"device-enrollment/apple/setup-automated-vision-os","toc_title":"Create an enrollment policy for visionOS"},{"href":"device-enrollment/apple/setup-just-in-time-registration","toc_title":"Set up just-in-time registration"},{"href":"device-enrollment/apple/setup-automated-shared-device-mode","toc_title":"Set up shared device mode"},{"href":"device-enrollment/apple/manage-devices-tokens-apple","toc_title":"Manage devices and tokens"},{"href":"device-enrollment/apple/tutorial-automated-ios","toc_title":"Tutorial: Enroll devices with ADE"},{"children":[{"href":"device-enrollment/apple/school-manager","toc_title":"Prerequisites"},{"href":"device-enrollment/apple/school-manager-step-1","toc_title":"Step 1 - Get a token and assign devices"},{"href":"device-enrollment/apple/school-manager-step-2","toc_title":"Step 2 - Create an enrollment policy"},{"href":"device-enrollment/apple/school-manager-step-3","toc_title":"Step 3 - Sync managed devices"}],"toc_title":"Set up with Apple School Manager"}],"toc_title":"Apple Automated Device Enrollment"},{"children":[{"href":"device-enrollment/apple/shared-device-solutions-ios","toc_title":"Shared device solutions"},{"href":"device-enrollment/apple/shared-ipad","toc_title":"Set up Shared iPad"}],"toc_title":"Shared iPad"},{"children":[{"href":"device-enrollment/apple/user-enrollment-methods-ios","toc_title":"Apple user enrollment overview"},{"href":"device-enrollment/apple/setup-user-company-portal","toc_title":"User enrollment with Company Portal"},{"href":"device-enrollment/apple/setup-account-driven-user","toc_title":"Account-driven user enrollment"}],"toc_title":"Apple user enrollment"},{"children":[{"href":"device-enrollment/apple/personal-device-options-ios","toc_title":"Personal device options"},{"href":"device-enrollment/apple/setup-web-based-ios","toc_title":"Web-based device enrollment"}],"toc_title":"Apple device enrollment"},{"children":[{"href":"device-enrollment/apple/setup-configurator-ios","toc_title":"Enroll corporate-owned devices"},{"href":"device-enrollment/apple/setup-corporate-userless","toc_title":"Enroll corporate-owned, userless devices"}],"toc_title":"Apple Configurator"},{"href":"device-enrollment/apple/backup-restore-ios","toc_title":"Back up and restore for ADE"},{"href":"device-enrollment/apple/enable-supervised-mode","toc_title":"Enable supervised mode"}],"toc_title":"Set up Apple mobile enrollment"},{"children":[{"href":"device-enrollment/apple/guide-macos","toc_title":"macOS enrollment guide"},{"href":"device-enrollment/apple/setup-direct-macos","toc_title":"Set up Direct Enrollment"},{"children":[{"href":"device-enrollment/apple/overview-automated-enrollment-macos","toc_title":"Automated Device Enrollment overview"},{"href":"device-enrollment/apple/setup-macos-token","toc_title":"Set up an enrollment token"},{"href":"device-enrollment/apple/setup-automated-macos","toc_title":"Create an enrollment profile"},{"href":"device-enrollment/apple/manage-devices-tokens-macos","toc_title":"Manage devices and tokens"}],"toc_title":"Apple Automated Device Enrollment"},{"href":"device-enrollment/apple/methods-macos","toc_title":"Configure enrollment settings"}],"toc_title":"Set up macOS enrollment"},{"children":[{"href":"device-enrollment/guide-linux","toc_title":"Linux enrollment guide"},{"href":"/intune/user-help/enrollment/enroll-linux","toc_title":"Intune user help for Linux enrollment"}],"toc_title":"Set up Linux enrollment"},{"children":[{"href":"device-enrollment/monitor-reports","toc_title":"View enrollment reports"},{"href":"/troubleshoot/mem/intune/troubleshoot-device-enrollment-in-intune?context=/intune/context","toc_title":"Troubleshoot device enrollment"},{"href":"/troubleshoot/mem/intune/troubleshoot-ios-enrollment-errors?context=/intune/context","toc_title":"Troubleshoot iOS/iPadOS enrollment"},{"href":"/troubleshoot/mem/intune/troubleshoot-windows-enrollment-errors?context=/intune/context","toc_title":"Troubleshoot Windows enrollment"},{"href":"/troubleshoot/mem/intune/troubleshoot-windows-auto-enrollment?context=/intune/context","toc_title":"Troubleshoot Windows auto-enrollment"},{"href":"/troubleshoot/mem/intune/troubleshoot-android-enrollment?context=/intune/context","toc_title":"Troubleshoot Android enrollment"}],"toc_title":"Troubleshoot enrollment"}],"href":"device-enrollment/","toc_title":"Enroll devices"},{"children":[{"displayName":"android, ios, ipados, macos, windows","href":"device-configuration/overview","toc_title":"Device configuration overview"},{"displayName":"configuration, settings, insight, security baselines","href":"device-configuration/settings-insight","toc_title":"Settings insight"},{"displayName":"android, ios, ipados, macos, windows","href":"device-configuration/create-device-profile","toc_title":"Create a profile"},{"displayName":"android, ios, ipados, macos, windows","href":"device-configuration/monitor-device-profile","toc_title":"Monitor profiles"},{"displayName":"deploy, push, android, ios, ipados, macos, windows","href":"device-configuration/assign-device-profile","toc_title":"Assign policies"},{"children":[{"displayName":"gpo, admx, ios, ipados, macos, windows","href":"device-configuration/settings-catalog/","toc_title":"Settings catalog overview"},{"displayName":"gpo, admx, ios, ipados, macos, windows","href":"device-configuration/settings-catalog/common-tasks","toc_title":"Sample tasks"},{"displayName":"printers, gpo, admx, windows","href":"device-configuration/settings-catalog/configure-universal-print","toc_title":"Create Universal Print policy"},{"displayName":"gpo, windows, macos, admx","href":"device-configuration/settings-catalog/configure-edge","toc_title":"Configure Microsoft Edge"},{"displayName":"gpo, windows, admx, update channel","href":"device-configuration/settings-catalog/update-office","toc_title":"Update Microsoft 365"},{"displayName":"gpo, windows","href":"device-configuration/settings-catalog/restrict-usb","toc_title":"Restrict USB devices"},{"displayName":"gpo, admx, windows, settings catalog","href":"device-configuration/settings-catalog/configure-admx-templates-windows","toc_title":"Configure ADMX"},{"displayName":"gpo, admx, macos","href":"device-configuration/settings-catalog/configure-recovery-lock-macos","toc_title":"Configure Recovery Lock on macOS"},{"displayName":"gpo, windows","href":"device-configuration/settings-catalog/import-custom-admx-templates","toc_title":"Import custom ADMX and ADML"},{"displayName":"gpo, admx, csp, windows","href":"device-configuration/import-group-policy-analytics","toc_title":"Analyze on-premises GPOs"},{"displayName":"gpo, admx, settings catalog, windows","href":"device-configuration/migrate-group-policy","toc_title":"Import GPOs to create a policy"},{"displayName":"gpo, admx, administrative template, windows","href":"device-configuration/settings-catalog/tutorial-group-policy-migration","toc_title":"Tutorial: Create settings catalog policy and compare with on-premises GPO"}],"displayName":"gpo, admx, ios, ipados, macos, windows","toc_title":"Settings catalog and GPO"},{"children":[{"children":[{"displayName":"android, ios, ipados, macos, windows","href":"device-configuration/templates/configure-vpn","toc_title":"Configure VPN"},{"href":"device-configuration/templates/configure-per-app-vpn-android","toc_title":"Per-app VPN for Android"},{"href":"device-configuration/templates/configure-per-app-vpn-ios","toc_title":"Per-app VPN for iOS/iPadOS"}],"toc_title":"VPN"},{"children":[{"displayName":"wifi, wireless, android, aosp, ios, ipados, macos, windows, holographic","href":"device-configuration/templates/configure-wifi","toc_title":"Configure Wi-Fi"},{"displayName":"wifi, wireless, windows, holographic","href":"device-configuration/templates/import-wifi-settings-windows","toc_title":"Import Wi-Fi settings"},{"displayName":"wifi, wireless, psk, oma-uri, eap, android, windows","href":"device-configuration/templates/create-wifi-preshared-key","toc_title":"Wi-Fi with a pre-shared key"}],"toc_title":"Wi-Fi"},{"displayName":"802.1x, ios, ipados, macos, windows","href":"device-configuration/templates/configure-wired-networks","toc_title":"Wired networks"},{"displayName":"trusted sites, ipv4, ipv6, range","href":"device-configuration/templates/create-network-boundary-windows","toc_title":"Network boundary on Windows"},{"children":[{"href":"device-configuration/templates/configure-esim-download-server","toc_title":"eSIM bulk activation with download server (settings catalog)"},{"href":"device-configuration/templates/enable-esim","toc_title":"eSIM bulk activation with activation codes (import CSV)"}],"displayName":"embedded sim, activation code","toc_title":"eSIM cellular on Windows"}],"toc_title":"Connectivity"},{"children":[{"href":"device-configuration/certificates/trusted-root-profiles","toc_title":"Create trusted certificate profiles"},{"displayName":"scep, android, ios, ipados, macos, windows","href":"device-configuration/certificates/scep-profiles","toc_title":"Use SCEP certificate profiles"},{"displayName":"pkcs, android, ios, ipados, macos, windows","href":"device-configuration/certificates/pkcs-profiles","toc_title":"Use PKCS certificate profiles"},{"displayName":"pkcs, pfx, import, android, ios, ipados, macos, windows","href":"device-configuration/certificates/imported-pfx-profiles","toc_title":"Use imported PFX certificates"},{"href":"device-configuration/certificates/remove-profiles","toc_title":"Remove SCEP or PKCS certificates"}],"displayName":"scep, pkcs, pfx, trusted root, android, ios, ipados, macos, windows","toc_title":"Certificates"},{"children":[{"displayName":"single sign-on, ios, ipados, macos","href":"device-configuration/enterprise-sso-plugin","toc_title":"SSO overview and options"},{"displayName":"single sign-on, ios, ipados","href":"device-configuration/settings-catalog/configure-enterprise-sso-plugin-ios","toc_title":"iOS/iPadOS Enterprise SSO plug-in"},{"displayName":"single sign-on, macos","href":"device-configuration/settings-catalog/configure-platform-sso-macos","toc_title":"Platform SSO for macOS"},{"displayName":"single sign-on, macos","href":"device-configuration/settings-catalog/configure-platform-sso-scenarios-macos","toc_title":"Platform SSO scenarios for macOS"},{"displayName":"single sign-on, macos, ade","href":"device-configuration/settings-catalog/configure-platform-sso-during-enrollment","toc_title":"Platform SSO in Automated Device Enrollment for macOS"},{"displayName":"single sign-on, macos","href":"device-configuration/templates/configure-enterprise-sso-plugin-macos","toc_title":"Enterprise SSO plug-in for macOS"},{"displayName":"enrollment, active directory, azure ad joined, join domain","href":"device-configuration/templates/configure-domain-join-windows","toc_title":"Domain Join on Windows"}],"toc_title":"Identity and SSO"},{"children":[{"displayName":"device restrictions, android, aosp, ios, ipados, macos, windows","href":"device-configuration/templates/configure-device-restrictions","toc_title":"Device restrictions"},{"displayName":"airprint, home screen, lock screen, sso, single sign-on, ios, ipados, macos","href":"device-configuration/templates/configure-device-features-apple","toc_title":"Device features on Apple"},{"displayName":"single app, multi app, windows, holographic","href":"device-configuration/templates/configure-kiosk","toc_title":"Kiosks and dedicated devices"},{"displayName":"shared pc, education, windows, holographic","href":"device-configuration/templates/configure-shared-device","toc_title":"Shared multi-user devices"},{"displayName":"windows","href":"device-configuration/templates/configure-education-settings","toc_title":"Education Take a Test app"},{"displayName":"android, ios, ipados, windows","href":"device-configuration/templates/configure-email","toc_title":"Email"},{"href":"device-configuration/templates/configure-edition-upgrade-windows","toc_title":"Upgrade Windows and S mode"}],"toc_title":"Device experience"},{"children":[{"children":[{"displayName":"oma-uri, csp, bash, powershell, android, ios, ipados, macos, windows","href":"device-configuration/templates/configure-custom-settings","toc_title":"Create custom profiles"},{"displayName":"csp, powershell, windows, holographic","href":"device-configuration/templates/configure-wdac-hololens","toc_title":"HoloLens 2 example"},{"displayName":"linux","href":"device-configuration/templates/configure-custom-settings-linux","toc_title":"Add Linux Bash scripts"}],"toc_title":"Custom settings and scripts"},{"displayName":"windows, device inventory","href":"device-configuration/collect-device-properties","toc_title":"Properties catalog (device inventory)"},{"children":[{"displayName":"bios, firmware, windows, dell","href":"device-configuration/templates/configure-bios-windows","toc_title":"Configure the BIOS"},{"displayName":"dfci, firmware, uefi, surface","href":"device-configuration/templates/configure-dfci-windows","toc_title":"DFCI settings for UEFI"}],"toc_title":"BIOS and DFCI on Windows"},{"displayName":"endpoint analytics, microsoft productivity score","href":"device-configuration/templates/configure-health-monitoring-windows","toc_title":"Windows health monitoring"},{"displayName":"kernel extensions, system extensions","href":"device-configuration/templates/configure-kernel-extensions-macos","toc_title":"Extensions on macOS"},{"displayName":"property list files, plist","href":"device-configuration/templates/configure-preference-file-macos","toc_title":"Preference file on macOS"},{"children":[{"displayName":"mobility extensions, android, stagenow, zebra","href":"device-configuration/templates/configure-zebra-mx-android","toc_title":"Configure MX on Android device administrator"},{"displayName":"mobility extensions, mx, android, zebra","href":"device-configuration/templates/troubleshoot-zebra-mx-android","toc_title":"StageNow logs and common issues"}],"toc_title":"Mobility Extensions on Zebra devices"},{"children":[{"displayName":"original equipment manufacturers, oem, oemconfig, schema, zebra, android","href":"device-configuration/templates/configure-oemconfig-android","toc_title":"OEMConfig overview"},{"displayName":"original equipment manufacturers, oem, oemconfig, schema, android","href":"device-configuration/templates/deploy-oemconfig-zebra-android","toc_title":"Profiles on Zebra devices"},{"displayName":"original equipment manufacturers, oem, oemconfig, schema, android, auto-grant","href":"device-configuration/templates/configure-managed-home-screen-permissions-android","toc_title":"Managed Home Screen permissions"}],"toc_title":"OEMConfig on Android Enterprise"}],"displayName":"oma-uri, csp, bash, powershell, oemconfig, zebra, dfci, bios","toc_title":"Custom profiles, scripts, and OEM"},{"children":[{"href":"device-security/endpoint-security-policies","toc_title":"Endpoint security overview"},{"href":"/intune/device-management/manage-endpoint-security-devices","toc_title":"Manage devices"},{"href":"device-security/reusable-settings-groups","toc_title":"Use reusable settings groups"},{"children":[{"href":"device-configuration/endpoint-security/manage-policies","toc_title":"Manage security policies"},{"href":"device-configuration/endpoint-security/account-protection","toc_title":"Account protection"},{"href":"device-configuration/endpoint-security/antivirus","toc_title":"Antivirus"},{"href":"device-configuration/endpoint-security/manage-app-control","toc_title":"Application Control"},{"href":"device-configuration/endpoint-security/attack-surface-reduction","toc_title":"Attack surface reduction"},{"href":"device-configuration/endpoint-security/disk-encryption","toc_title":"Disk encryption"},{"href":"device-configuration/endpoint-security/deploy-edr","toc_title":"Endpoint detection and response"},{"href":"device-configuration/endpoint-security/configure-endpoint-protection","toc_title":"Endpoint protection"},{"href":"device-configuration/endpoint-security/firewall","toc_title":"Firewall"}],"toc_title":"Security policy"},{"children":[{"href":"device-configuration/endpoint-security/encrypt-bitlocker-windows","toc_title":"Manage BitLocker policy"},{"href":"device-configuration/endpoint-security/encrypt-filevault-macos","toc_title":"Manage FileVault policy"},{"href":"device-configuration/endpoint-security/monitor-encryption","toc_title":"Monitor disk encryption"},{"href":"/troubleshoot/mem/intune/troubleshoot-bitlocker-policies?context=/intune/context","toc_title":"Troubleshoot BitLocker policies"}],"toc_title":"Encrypt disks"},{"children":[{"children":[{"href":"device-configuration/endpoint-security/ref-antivirus-defender-settings-macos","toc_title":"macOS Defender Antivirus settings"},{"href":"device-configuration/endpoint-security/ref-antivirus-defender-settings-windows","toc_title":"Windows Defender Antivirus settings"},{"href":"device-configuration/endpoint-security/ref-antivirus-defender-settings-windows-tenant-attach","toc_title":"Tenant attach Defender Antivirus settings"},{"href":"device-configuration/endpoint-security/ref-windows-security-settings-tenant-attach","toc_title":"Tenant attach Windows Security settings"},{"href":"device-configuration/endpoint-security/ref-security-experience-settings-windows","toc_title":"Windows Security experience settings"}],"toc_title":"Antivirus policy settings"},{"displayName":"AWA; Add Work Account","href":"device-configuration/endpoint-security/ref-disk-encryption-settings","toc_title":"Disk encryption profile settings"},{"href":"device-configuration/endpoint-security/ref-firewall-settings","toc_title":"Firewall policy settings"},{"href":"device-configuration/endpoint-security/ref-firewall-settings-tenant-attach","toc_title":"Tenant attach Firewall settings"},{"href":"device-configuration/endpoint-security/ref-edr-settings","toc_title":"Endpoint detection and response profile settings"},{"href":"device-configuration/endpoint-security/ref-attack-surface-reduction-settings","toc_title":"Attack surface reduction profile settings"},{"href":"device-configuration/endpoint-security/ref-account-protection-settings","toc_title":"Account protection profile settings"}],"toc_title":"Settings reference"}],"displayName":"bitlocker, firewall, antivirus, defender, encryption, edr, attack surface reduction","toc_title":"Endpoint security policies"},{"children":[{"children":[{"displayName":"ios, ipados, macos","href":"device-configuration/settings-catalog/ref-apple-settings","toc_title":"Apple"},{"displayName":"Android","href":"device-configuration/settings-catalog/ref-android-settings","toc_title":"Android"}],"toc_title":"Settings catalog lists"},{"children":[{"displayName":"cope, cobo, cosu, byod, work profile, android, android enterprise, ae, aosp","href":"device-configuration/templates/ref-device-restrictions-android-enterprise","toc_title":"Device restrictions"},{"displayName":"byod, work profile, android, android enterprise, ae","href":"device-configuration/templates/ref-email-settings-android-enterprise","toc_title":"Email"},{"displayName":"cope, cobo, cosu, byod, work profile, android, android enterprise, ae","href":"device-configuration/templates/ref-vpn-settings-android-enterprise","toc_title":"VPN"},{"displayName":"wifi, wireless, cope, cobo, cosu, byod, work profile, android, android enterprise, ae, aosp","href":"device-configuration/templates/ref-wifi-settings-android-enterprise","toc_title":"Wi-Fi"}],"toc_title":"Android"},{"children":[{"displayName":"oma uri, android, device administrator, da","href":"device-configuration/templates/configure-custom-settings-android","toc_title":"Custom settings"},{"displayName":"oma uri, custom, android, device administrator, da","href":"device-configuration/templates/manage-apps-samsung-knox","toc_title":"Allow/block apps for Samsung Knox Standard"},{"displayName":"android, device administrator, da","href":"device-configuration/templates/ref-device-restrictions-android","toc_title":"Device restrictions"},{"displayName":"android, device administrator, da","href":"device-configuration/templates/ref-email-settings-android","toc_title":"Email"},{"displayName":"android, device administrator, da","href":"device-configuration/templates/ref-vpn-settings-android","toc_title":"VPN"},{"displayName":"wifi, wireless, android, device administrator, da","href":"device-configuration/templates/ref-wifi-settings-android","toc_title":"Wi-Fi"}],"toc_title":"Android device administrator"},{"children":[{"displayName":"apple, ios, ipados, macos, ddm, app settings","href":"device-configuration/templates/apple-ddm-app-settings","toc_title":"Configure Apple app settings"},{"displayName":"apple, ios, ipados, macos","href":"device-configuration/templates/configure-custom-settings-apple","toc_title":"Custom"},{"displayName":"apple, ios, ipados, macos","href":"device-configuration/templates/ref-device-features-apple","toc_title":"Device features"},{"displayName":"apple, ios, ipados, macos","href":"device-configuration/templates/ref-device-restrictions-apple","toc_title":"Device restrictions"},{"displayName":"apple, ios, ipados","href":"device-configuration/templates/ref-email-settings-ios","toc_title":"Email"},{"displayName":"apple, macos","href":"device-configuration/endpoint-security/ref-endpoint-protection-macos","toc_title":"Endpoint protection (deprecated)"},{"displayName":"kernel, system, macos","href":"device-configuration/templates/ref-kernel-extensions-settings-macos","toc_title":"Extensions (deprecated)"},{"displayName":"apple, ios, ipados, macos","href":"device-configuration/templates/ref-vpn-settings-apple","toc_title":"VPN"},{"displayName":"wifi, wireless, apple, ios, ipados, macos","href":"device-configuration/templates/ref-wifi-settings-apple","toc_title":"Wi-Fi"},{"displayName":"apple, ios, ipados, macos","href":"device-configuration/templates/ref-wired-network-settings-macos","toc_title":"Wired networks"},{"displayName":"apple, ios, ipados, macos","href":"device-configuration/templates/ref-bundle-ids-ios","toc_title":"Bundle IDs for built-in apps"}],"toc_title":"Apple"},{"children":[{"displayName":"oma uri, windows","href":"device-configuration/templates/configure-custom-settings-windows","toc_title":"Custom (OMA-URI)"},{"displayName":"windows","href":"device-configuration/templates/ref-delivery-optimization-settings-windows","toc_title":"Delivery optimization"},{"displayName":"bios, uefi, windows","href":"device-configuration/templates/ref-dfci-settings-windows","toc_title":"Device Firmware Configuration Interface (DFCI)"},{"displayName":"windows","href":"device-configuration/templates/ref-device-restrictions-windows","toc_title":"Device restrictions"},{"displayName":"surface","href":"device-configuration/templates/ref-device-restrictions-surface-hub","toc_title":"Device restrictions (Windows 10 Teams)"},{"displayName":"windows, s mode","href":"device-configuration/templates/ref-edition-upgrade-settings-windows","toc_title":"Edition upgrade and mode switch"},{"displayName":"windows","href":"device-configuration/templates/ref-email-settings-windows","toc_title":"Email"},{"displayName":"windows","href":"device-configuration/endpoint-security/ref-endpoint-protection-settings-windows","toc_title":"Endpoint protection"},{"displayName":"hello, windows","href":"device-security/identity-protection/ref-settings","toc_title":"Identity protection (deprecated)"},{"displayName":"single app, multi app, dedicated device, windows","href":"device-configuration/templates/ref-kiosk-settings-windows","toc_title":"Kiosk"},{"displayName":"windows","href":"device-configuration/templates/ref-shared-device-settings-windows","toc_title":"Shared multi-user device"},{"displayName":"windows","href":"device-configuration/templates/ref-vpn-settings-windows","toc_title":"VPN"},{"displayName":"wifi, wireless, windows","href":"device-configuration/templates/ref-wifi-settings-windows","toc_title":"Wi-Fi"},{"displayName":"windows","href":"device-configuration/templates/ref-wired-network-settings-windows","toc_title":"Wired network"}],"toc_title":"Windows"},{"children":[{"displayName":"oma uri, windows holographic, hololens","href":"device-configuration/templates/ref-custom-settings-windows-holographic","toc_title":"Custom (OMA-URI)"},{"displayName":"windows holographic, hololens","href":"device-configuration/templates/ref-device-restrictions-windows-holographic","toc_title":"Device restrictions"},{"displayName":"windows holographic, hololens","href":"device-configuration/templates/ref-holographic-upgrade-settings","toc_title":"Edition upgrade and mode switch"},{"displayName":"single app, multi app, dedicated device, windows holographic, hololens","href":"device-configuration/templates/ref-kiosk-settings-windows-holographic","toc_title":"Kiosk"},{"displayName":"windows holographic, hololens","href":"device-configuration/templates/ref-shared-device-settings-windows-holographic","toc_title":"Shared multi-user device"}],"toc_title":"Windows Holographic for Business"},{"children":[{"displayName":"windows","href":"device-configuration/templates/ref-device-restrictions-windows-8-1","toc_title":"Device restrictions"},{"displayName":"windows","href":"device-configuration/templates/ref-vpn-settings-windows-8-1","toc_title":"VPN"}],"toc_title":"Windows 8.1"}],"toc_title":"Settings reference"},{"children":[{"displayName":"faq, frequently asked questions, android, ios, ipados, macos, windows","href":"device-configuration/troubleshoot-device-profiles","toc_title":"Troubleshoot profiles"},{"displayName":"wifi, wireless, android, ios, ipados, macos, windows, holographic","href":"/troubleshoot/mem/intune/troubleshoot-wi-fi-profiles?context=/intune/context","toc_title":"Troubleshoot Wi-Fi"},{"displayName":"android, ios, ipados, windows","href":"/troubleshoot/mem/intune/troubleshoot-email-profiles-in-microsoft-intune?context=/intune/context","toc_title":"Troubleshoot email profiles"}],"toc_title":"Troubleshooting"}],"href":"device-configuration/","toc_title":"Configure devices"},{"children":[{"href":"app-management/overview","toc_title":"App management overview"},{"children":[{"href":"app-management/lifecycle","toc_title":"App lifecycle"},{"displayName":"mobile application management, mam-we, mamwe","href":"app-management/protection/mam-without-enrollment","toc_title":"App protection without enrollment"},{"displayName":"app-we; without; without enrollment","href":"app-management/protection/mam-vs-work-profiles-android","toc_title":"App protection vs work profiles (Android)"},{"displayName":"Windows MAM","href":"app-management/protection/enable-mam-windows","toc_title":"Data protection for Windows MAM"},{"href":"app-management/manage-without-gms","toc_title":"Intune without Google Mobile Services"},{"displayName":"MAM","href":"app-management/protection/mam-faq","toc_title":"MAM FAQ"}],"toc_title":"Concepts"},{"children":[{"displayName":"apk; ipa; msi; appx; appxbundle; msix; msixbundle; app","href":"app-management/deployment/","toc_title":"Add apps overview"},{"href":"app-management/ref-protected-apps","toc_title":"Intune protected apps"},{"href":"app-management/deployment/add-store-android","toc_title":"Android store apps"},{"href":"app-management/deployment/add-store-ios","toc_title":"iOS store apps"},{"href":"app-management/deployment/add-microsoft-store","toc_title":"Microsoft Store apps"},{"href":"app-management/deployment/add-microsoft-store-legacy","toc_title":"Microsoft Store apps (legacy)"},{"href":"app-management/deployment/add-managed-google-play","toc_title":"Managed Google Play apps"},{"href":"app-management/deployment/add-microsoft-365-windows","toc_title":"Microsoft 365 apps for Windows"},{"href":"app-management/deployment/add-microsoft-365-macos","toc_title":"Microsoft 365 apps for macOS"},{"href":"app-management/configuration/manage-system-apps-android","toc_title":"Android Enterprise system apps"},{"displayName":"web; web link; weblink; web-link","href":"app-management/deployment/add-web","toc_title":"Web apps"},{"href":"app-management/deployment/add-built-in","toc_title":"Built-in apps"},{"children":[{"href":"app-management/deployment/add-lob-android","toc_title":"Android LOB apps"},{"href":"app-management/deployment/add-lob-ios","toc_title":"iOS LOB apps"},{"href":"app-management/deployment/add-lob-windows","toc_title":"Windows LOB apps"},{"href":"app-management/deployment/add-lob-macos","toc_title":"macOS LOB apps"}],"toc_title":"LOB apps"},{"children":[{"href":"app-management/deployment/win32","toc_title":"Win32 app management overview"},{"href":"app-management/deployment/create-win32-package","toc_title":"Prepare a Win32 app"},{"href":"app-management/deployment/add-win32","toc_title":"Add a Win32 app"},{"href":"app-management/deployment/configure-win32-supersedence","toc_title":"Win32 app supersedence"},{"href":"app-management/deployment/deploy-win32-update-package","toc_title":"Deploy Windows update packages"},{"href":"app-management/deployment/enable-win32-s-mode","toc_title":"Win32 app S mode devices"}],"toc_title":"Win32 app management"},{"children":[{"href":"app-management/deployment/management-agent-macos","toc_title":"Intune management agent for macOS"},{"href":"app-management/deployment/add-dmg-macos","toc_title":"Add a macOS DMG app"},{"displayName":"unmanaged, pkg","href":"app-management/deployment/add-unmanaged-pkg-macos","toc_title":"Add an unmanaged macOS PKG app"}],"toc_title":"macOS app management"},{"children":[{"href":"app-management/deployment/enterprise-app-management","toc_title":"Enterprise App Management overview"},{"href":"app-management/deployment/add-enterprise-catalog-app","toc_title":"Add an Enterprise App Catalog app"},{"href":"app-management/deployment/update-enterprise-supersedence","toc_title":"Guided update supersedence"}],"toc_title":"Enterprise App Management"},{"children":[{"href":"app-management/deployment/add-company-portal-autopilot","toc_title":"Company Portal - Windows Autopilot"},{"href":"app-management/deployment/add-company-portal-windows","toc_title":"Company Portal - Download"},{"href":"app-management/deployment/add-company-portal-macos","toc_title":"Company Portal - macOS"},{"href":"app-management/deployment/add-edge-windows","toc_title":"Microsoft Edge for Windows"},{"href":"app-management/deployment/add-edge-macos","toc_title":"Microsoft Edge for macOS"},{"href":"app-management/deployment/add-defender-macos","toc_title":"Microsoft Defender for Endpoint for macOS"}],"toc_title":"Company Portal and specific apps"},{"href":"app-management/deployment/ref-lob-app-versioning","toc_title":"LOB app versioning"},{"href":"app-management/collect-bundle-ids","toc_title":"Get the app bundle ID"}],"toc_title":"Add apps"},{"children":[{"displayName":"app assignment; assignment","href":"app-management/deployment/assign-groups","toc_title":"Assign apps to groups"},{"displayName":"app assignment","href":"app-management/deployment/configure-assignment-scope","toc_title":"Include and exclude apps"},{"href":"app-management/deployment/deploy-windows","toc_title":"Deploy Windows apps"},{"href":"app-management/deployment/deploy-gcc-dod","toc_title":"Deploy apps to Government environments"}],"toc_title":"Assign apps"},{"href":"app-management/deployment/enhanced-app-inventory","toc_title":"App inventory"},{"children":[{"displayName":"App configuration policy; configuration policy; AFW","href":"app-management/configuration/overview","toc_title":"App configuration policies overview"},{"href":"app-management/configuration/configure-managed-ios","toc_title":"iOS managed devices"},{"href":"app-management/configuration/configure-managed-android","toc_title":"Android managed devices"},{"href":"app-management/configuration/configure-managed-apps","toc_title":"Managed apps"},{"href":"app-management/deployment/manage-provisioning-profiles-ios","toc_title":"iOS app provisioning profiles"},{"href":"app-management/configuration/configure-managed-home-screen","toc_title":"Configure the Managed Home Screen"},{"href":"app-management/configuration/configure-company-portal","toc_title":"Configure the Company Portal"},{"href":"app-management/configuration/configure-launcher-android","toc_title":"Configure Microsoft Launcher"},{"href":"app-management/configuration/configure-edge-ios-android","toc_title":"Configure Microsoft Edge for iOS/Android"},{"href":"app-management/configuration/configure-edge-windows","toc_title":"Configure Microsoft Edge for Windows"},{"href":"app-management/configuration/configure-microsoft-365-mobile","toc_title":"Configure Office"},{"href":"app-management/configuration/configure-outlook","toc_title":"Configure Outlook"},{"href":"app-management/configuration/configure-teams-mobile","toc_title":"Configure Microsoft Teams"},{"href":"app-management/configuration/configure-chrome-android","toc_title":"Configure Google Chrome for Android"},{"href":"app-management/configuration/configure-vpn-android","toc_title":"VPN and per-app VPN on Android Enterprise"},{"children":[{"displayName":"vpp; volume purchased","href":"app-management/deployment/manage-volume-purchased","toc_title":"Volume-purchased overview"},{"href":"app-management/deployment/manage-vpp-apple","toc_title":"Volume-purchased iOS apps"},{"href":"app-management/deployment/manage-ebooks-ios","toc_title":"iOS eBooks"}],"toc_title":"Volume-purchased apps"},{"href":"app-management/configuration/microsoft-365-policies","toc_title":"Policies for Microsoft 365 apps"}],"toc_title":"Configure apps"},{"children":[{"displayName":"app; protection; policy","href":"app-management/protection/overview","toc_title":"App protection policies overview"},{"href":"/intune/solutions/edge-data-security/overview","toc_title":"Secure corporate data using Edge for Business"},{"href":"app-management/protection/data-protection-framework","toc_title":"Data protection framework"},{"displayName":"dlp; data loss prevention","href":"app-management/protection/create-policy","toc_title":"Create app protection policies"},{"href":"app-management/protection/ref-settings-android","toc_title":"Android protection settings"},{"href":"app-management/protection/ref-settings-ios","toc_title":"iOS protection settings"},{"href":"app-management/protection/ref-settings-windows","toc_title":"Windows protection settings"},{"href":"app-management/protection/configure-conditional-launch","toc_title":"Conditional launch settings"},{"href":"app-management/protection/create-data-transfer-exceptions","toc_title":"Data transfer exceptions"},{"href":"app-management/protection/validate-policy-setup","toc_title":"Validate app protection policies"},{"href":"app-management/protection/policy-delivery-timing","toc_title":"App protection policy delivery"},{"href":"app-management/protection/policy-extensions","toc_title":"Protect app extensions"},{"href":"app-management/protection/monitor-policies","toc_title":"Monitor app protection user status"},{"href":"app-management/protection/manage-data-transfer-ios","toc_title":"Manage data transfer between iOS apps"},{"href":"app-management/protection/wipe-corporate-data","toc_title":"Selectively wipe apps"},{"href":"app-management/protection/configure-quiet-time","toc_title":"Quiet time policies"},{"href":"app-management/protection/multiple-managed-accounts","toc_title":"Multiple managed accounts"}],"href":"app-management/protection/","toc_title":"Protect apps"},{"children":[{"href":"app-management/monitor-assignments","toc_title":"Monitor app assignments"},{"href":"app-management/discovered-apps","toc_title":"Discovered apps"}],"toc_title":"Monitor apps"},{"children":[{"href":"app-management/deployment/troubleshoot-win32","toc_title":"Troubleshoot Win32 apps"},{"href":"/troubleshoot/mem/intune/troubleshoot-app-install?context=/intune/context","toc_title":"Troubleshoot app installation problems"},{"href":"/troubleshoot/mem/intune/app-install-error-codes?context=/intune/context","toc_title":"App installation error reference"},{"href":"/troubleshoot/mem/intune/troubleshoot-mam?context=/intune/context","toc_title":"Troubleshoot mobile application management"},{"href":"app-management/protection/troubleshoot-protection-logs","toc_title":"Review app protection logs"},{"href":"/troubleshoot/mem/intune/troubleshoot-app-protection-policy-deployment?context=/intune/context","toc_title":"Troubleshoot app protection policy deployment"}],"toc_title":"Troubleshoot"}],"href":"app-management/","toc_title":"Manage apps"},{"children":[{"href":"device-security/overview","toc_title":"Device security overview"},{"children":[{"children":[{"href":"device-security/compliance/overview","toc_title":"Compliance overview"},{"href":"device-security/compliance/create-policy","toc_title":"Create a policy"},{"children":[{"href":"device-security/compliance/create-custom-json","toc_title":"JSON for custom settings"},{"href":"device-security/compliance/create-custom-script","toc_title":"PowerShell script for custom settings"},{"href":"device-security/compliance/configure-wsl","toc_title":"Windows Subsystem for Linux"}],"href":"device-security/compliance/custom-settings","toc_title":"Custom compliance settings"},{"href":"device-security/compliance/configure-noncompliance-actions","toc_title":"Actions for noncompliance"},{"href":"device-security/compliance/monitor-policy","toc_title":"Monitor device compliance"},{"href":"device-security/compliance/third-party-partners","toc_title":"Device compliance partners"},{"children":[{"href":"device-security/compliance/ref-android-administrator-settings","toc_title":"Android device administrator"},{"href":"device-security/compliance/ref-android-aosp-settings","toc_title":"Android (AOSP)"},{"href":"device-security/compliance/ref-android-enterprise-settings","toc_title":"Android Enterprise"},{"href":"device-security/compliance/ref-ios-ipados-settings","toc_title":"iOS/iPadOS"},{"href":"device-security/compliance/ref-linux-settings","toc_title":"Linux"},{"href":"device-security/compliance/ref-macos-settings","toc_title":"macOS"},{"href":"device-security/compliance/ref-windows-settings","toc_title":"Windows"},{"href":"device-security/compliance/ref-windows-8-1-settings","toc_title":"Windows 8.1"}],"toc_title":"Settings reference"}],"toc_title":"Compliance policies"},{"children":[{"displayName":"ca","href":"device-security/conditional-access-integration/overview","toc_title":"Conditional Access overview"},{"href":"device-security/conditional-access-integration/scenarios","toc_title":"Common ways to use Conditional Access"},{"href":"device-security/conditional-access-integration/app-based-policies","toc_title":"App-based Conditional Access"},{"href":"device-security/conditional-access-integration/device-based-policies","toc_title":"Device-based Conditional Access"},{"href":"device-security/conditional-access-integration/block-no-modern-auth","toc_title":"Block apps that don\u0027t use modern authentication (MSAL)"},{"href":"device-security/conditional-access-integration/manage-exchange-access","toc_title":"Manage access to Exchange Online"},{"href":"/troubleshoot/mem/intune/troubleshoot-conditional-access?context=/intune/context","toc_title":"Troubleshoot Conditional Access"},{"children":[{"href":"device-security/conditional-access-integration/configure-jamf-cloud-connector","toc_title":"Use the Jamf Cloud connector"},{"href":"device-security/conditional-access-integration/setup-jamf-manually","toc_title":"Integrate Jamf Pro with Intune for compliance"},{"href":"device-security/compliance/jamf-entra-id","toc_title":"Integrate Jamf Pro with Intune"},{"href":"device-security/conditional-access-integration/assign-jamf-policies","toc_title":"Enforce compliance on Macs managed with Jamf Pro"},{"href":"/troubleshoot/mem/intune/troubleshoot-jamf?context=/intune/context","toc_title":"Troubleshoot Jamf Pro integration"}],"toc_title":"Jamf Cloud connector"}],"toc_title":"Conditional Access"}],"toc_title":"Compliance and Conditional Access"},{"children":[{"href":"device-security/endpoint-security-devices","toc_title":"Manage devices with endpoint security"},{"children":[{"href":"device-security/endpoint-security-policies","toc_title":"Endpoint security overview"},{"href":"/intune/device-management/manage-endpoint-security-devices","toc_title":"Manage devices"},{"href":"device-security/reusable-settings-groups","toc_title":"Use reusable settings groups"},{"children":[{"href":"device-configuration/endpoint-security/manage-policies","toc_title":"Manage security policies"},{"href":"device-configuration/endpoint-security/account-protection","toc_title":"Account protection"},{"href":"device-configuration/endpoint-security/antivirus","toc_title":"Antivirus"},{"href":"device-configuration/endpoint-security/manage-app-control","toc_title":"Application Control"},{"href":"device-configuration/endpoint-security/attack-surface-reduction","toc_title":"Attack surface reduction"},{"href":"device-configuration/endpoint-security/disk-encryption","toc_title":"Disk encryption"},{"href":"device-configuration/endpoint-security/deploy-edr","toc_title":"Endpoint detection and response"},{"href":"device-configuration/endpoint-security/configure-endpoint-protection","toc_title":"Endpoint protection"},{"href":"device-configuration/endpoint-security/firewall","toc_title":"Firewall"}],"toc_title":"Security policy"},{"children":[{"href":"device-configuration/endpoint-security/encrypt-bitlocker-windows","toc_title":"Manage BitLocker policy"},{"href":"device-configuration/endpoint-security/encrypt-filevault-macos","toc_title":"Manage FileVault policy"},{"href":"device-configuration/endpoint-security/monitor-encryption","toc_title":"Monitor disk encryption"},{"href":"/troubleshoot/mem/intune/troubleshoot-bitlocker-policies?context=/intune/context","toc_title":"Troubleshoot BitLocker policies"}],"toc_title":"Encrypt disks"},{"children":[{"children":[{"href":"device-configuration/endpoint-security/ref-antivirus-defender-settings-macos","toc_title":"macOS Defender Antivirus settings"},{"href":"device-configuration/endpoint-security/ref-antivirus-defender-settings-windows","toc_title":"Windows Defender Antivirus settings"},{"href":"device-configuration/endpoint-security/ref-antivirus-defender-settings-windows-tenant-attach","toc_title":"Tenant attach Defender Antivirus settings"},{"href":"device-configuration/endpoint-security/ref-windows-security-settings-tenant-attach","toc_title":"Tenant attach Windows Security settings"},{"href":"device-configuration/endpoint-security/ref-security-experience-settings-windows","toc_title":"Windows Security experience settings"}],"toc_title":"Antivirus policy settings"},{"displayName":"AWA; Add Work Account","href":"device-configuration/endpoint-security/ref-disk-encryption-settings","toc_title":"Disk encryption profile settings"},{"href":"device-configuration/endpoint-security/ref-firewall-settings","toc_title":"Firewall policy settings"},{"href":"device-configuration/endpoint-security/ref-firewall-settings-tenant-attach","toc_title":"Tenant attach Firewall settings"},{"href":"device-configuration/endpoint-security/ref-edr-settings","toc_title":"Endpoint detection and response profile settings"},{"href":"device-configuration/endpoint-security/ref-attack-surface-reduction-settings","toc_title":"Attack surface reduction profile settings"},{"href":"device-configuration/endpoint-security/ref-account-protection-settings","toc_title":"Account protection profile settings"}],"toc_title":"Settings reference"}],"toc_title":"Endpoint security policies"},{"children":[{"href":"device-security/microsoft-defender/overview","toc_title":"Microsoft Defender for Endpoint"},{"href":"device-security/microsoft-defender/configure-integration","toc_title":"Configure Defender for Endpoint"},{"href":"device-security/microsoft-defender/deploy-android","toc_title":"Deploy Defender for Endpoint on Android"},{"href":"device-security/microsoft-defender/configure-web-protection-android","toc_title":"Android web protection"},{"href":"device-security/microsoft-defender/monitor","toc_title":"Monitor Defender for Endpoint"},{"children":[{"href":"device-security/microsoft-defender/security-settings-management","toc_title":"Microsoft Defender for Endpoint Security settings management"},{"href":"/defender-endpoint/manage-security-policies?context=/intune/context","toc_title":"Manage endpoint security policies in Microsoft Defender"}],"toc_title":"Microsoft Defender for Endpoint Security settings management"},{"href":"device-security/microsoft-defender/remediate-vulnerabilities","toc_title":"Security tasks"}],"toc_title":"Microsoft Defender for Endpoint"},{"children":[{"href":"device-security/mobile-threat-defense/overview","toc_title":"Mobile Threat Defense overview"},{"children":[{"href":"device-security/mobile-threat-defense/add-apps-unenrolled-devices","toc_title":"Add MTD apps to unenrolled devices"},{"href":"device-security/mobile-threat-defense/create-app-protection-policy","toc_title":"Create an MTD app protection policy"},{"href":"device-security/mobile-threat-defense/enable-unenrolled-devices","toc_title":"Enable MTD for unenrolled devices"}],"toc_title":"MTD on unenrolled devices"},{"children":[{"href":"device-security/mobile-threat-defense/assign-apps","toc_title":"Add MTD apps to enrolled devices"},{"href":"device-security/mobile-threat-defense/create-compliance-policy","toc_title":"Create an MTD device compliance policy"},{"href":"device-security/mobile-threat-defense/enable-connector","toc_title":"Enable MTD for enrolled devices"}],"toc_title":"MTD on enrolled devices"},{"children":[{"children":[{"displayName":"sso","href":"device-security/mobile-threat-defense/setup-better-mobile","toc_title":"Better Mobile and Intune integration"}],"href":"device-security/mobile-threat-defense/better-mobile","toc_title":"Set up Better Mobile"},{"children":[{"href":"device-security/mobile-threat-defense/setup-blackberry","toc_title":"BlackBerry and Intune integration"}],"href":"device-security/mobile-threat-defense/blackberry","toc_title":"Set up BlackBerry Protect Mobile"},{"children":[{"href":"device-security/mobile-threat-defense/setup-checkpoint-harmony","toc_title":"Check Point Harmony and Intune integration"}],"href":"device-security/mobile-threat-defense/checkpoint-harmony","toc_title":"Set up Check Point Harmony"},{"children":[{"href":"device-security/mobile-threat-defense/setup-crowdstrike-falcon","toc_title":"CrowdStrike Falcon and Intune integration"}],"href":"device-security/mobile-threat-defense/crowdstrike-falcon","toc_title":"Set up CrowdStrike"},{"children":[{"href":"device-security/mobile-threat-defense/setup-iverify","toc_title":"iVerify and Intune integration"}],"href":"device-security/mobile-threat-defense/iverify","toc_title":"Set up iVerify"},{"children":[{"href":"device-security/mobile-threat-defense/setup-jamf","toc_title":"Jamf and Intune integration"}],"href":"device-security/mobile-threat-defense/jamf","toc_title":"Set up Jamf"},{"children":[{"href":"device-security/mobile-threat-defense/setup-lookout","toc_title":"Lookout and Intune integration"}],"href":"device-security/mobile-threat-defense/lookout","toc_title":"Set up Lookout"},{"children":[{"href":"device-security/mobile-threat-defense/setup-trellix","toc_title":"Trellix Mobile Security and Intune integration"}],"href":"device-security/mobile-threat-defense/trellix","toc_title":"Set up Trellix Mobile Security"},{"children":[{"href":"device-security/mobile-threat-defense/setup-pradeo","toc_title":"Pradeo and Intune integration"}],"href":"device-security/mobile-threat-defense/pradeo","toc_title":"Set up Pradeo"},{"children":[{"href":"device-security/mobile-threat-defense/setup-sentinelone","toc_title":"SentinelOne Mobile and Intune integration"}],"href":"device-security/mobile-threat-defense/sentinelone","toc_title":"Set up SentinelOne Mobile"},{"children":[{"href":"device-security/mobile-threat-defense/setup-sophos","toc_title":"Sophos Mobile and Intune integration"}],"href":"device-security/mobile-threat-defense/sophos","toc_title":"Set up Sophos Mobile"},{"children":[{"href":"device-security/mobile-threat-defense/setup-symantec","toc_title":"Symantec and Intune integration"}],"href":"device-security/mobile-threat-defense/symantec","toc_title":"Set up Symantec"},{"children":[{"href":"device-security/mobile-threat-defense/setup-trend-micro","toc_title":"Trend Micro Mobile Security as a Service and Intune integration"}],"href":"device-security/mobile-threat-defense/trend-micro","toc_title":"Set up Trend Micro Mobile Security as a Service"},{"children":[{"href":"device-security/mobile-threat-defense/setup-trustd-mobile","toc_title":"Trustd Mobile and Intune integration"}],"href":"device-security/mobile-threat-defense/trustd-mobile","toc_title":"Set up Trustd Mobile"},{"children":[{"href":"device-security/mobile-threat-defense/setup-zimperium","toc_title":"Zimperium and Intune integration"}],"href":"device-security/mobile-threat-defense/zimperium","toc_title":"Set up Zimperium"}],"toc_title":"MTD apps"}],"toc_title":"Mobile Threat Defense partners"},{"children":[{"href":"device-security/microsoft-tunnel/overview","toc_title":"Microsoft Tunnel overview"},{"href":"device-security/microsoft-tunnel/prerequisites","toc_title":"Microsoft Tunnel prerequisites"},{"href":"device-security/microsoft-tunnel/install","toc_title":"Configure Microsoft Tunnel"},{"children":[{"href":"device-security/microsoft-tunnel/mam","toc_title":"Microsoft Tunnel for MAM overview"},{"href":"device-security/microsoft-tunnel/mam-android","toc_title":"MAM Tunnel for Android"},{"href":"device-security/microsoft-tunnel/mam-ios","toc_title":"MAM Tunnel for iOS"}],"toc_title":"Microsoft Tunnel for MAM"},{"href":"device-security/microsoft-tunnel/monitor","toc_title":"Monitor Microsoft Tunnel"},{"href":"device-security/microsoft-tunnel/upgrade","toc_title":"Upgrade Microsoft Tunnel"},{"href":"device-security/microsoft-tunnel/conditional-access","toc_title":"Microsoft Tunnel with Conditional Access"},{"href":"device-security/microsoft-tunnel/ref-file-commands","toc_title":"Microsoft Tunnel command-line tools"}],"toc_title":"Microsoft Tunnel VPN gateway"},{"children":[{"href":"device-security/security-baselines/overview","toc_title":"Security baselines overview"},{"href":"device-security/security-baselines/configure-baselines","toc_title":"Configure security baselines"},{"href":"device-security/security-baselines/monitor-baselines","toc_title":"Monitor your baselines"},{"href":"device-security/security-baselines/stig-audit-baseline","toc_title":"STIG audit baseline"},{"children":[{"href":"device-security/security-baselines/ref-windows-mdm-settings","toc_title":"Windows MDM baseline settings"},{"href":"device-security/security-baselines/ref-defender-settings","toc_title":"Microsoft Defender for Endpoint baseline settings"},{"href":"device-security/security-baselines/ref-v2-office-settings","toc_title":"Microsoft 365 Apps for Enterprise baseline settings (Office)"},{"href":"device-security/security-baselines/ref-v2-edge-settings","toc_title":"Microsoft Edge baseline settings (version 112 and higher)"},{"href":"device-security/security-baselines/ref-edge-settings","toc_title":"Microsoft Edge baseline settings (version 85 and older)"},{"href":"device-security/security-baselines/ref-hololens2-standard-settings","toc_title":"HoloLens 2 - Standard security baseline settings"},{"href":"device-security/security-baselines/ref-hololens2-advanced-settings","toc_title":"HoloLens 2 - Advanced security baseline settings"},{"href":"device-security/security-baselines/ref-openclaw-settings","toc_title":"Local AI Agent Baseline - OpenClaw settings"},{"href":"device-security/security-baselines/ref-windows-365-agents-settings","toc_title":"Windows 365 for Agents baseline settings"},{"href":"device-security/security-baselines/ref-windows-365-settings","toc_title":"Windows 365 baseline settings"}],"toc_title":"Baseline settings reference"}],"toc_title":"Security baselines"},{"children":[{"href":"device-security/security-configurations/android-fully-managed","toc_title":"Android fully managed compliance and security"},{"href":"device-security/security-configurations/android-personally-owned","toc_title":"Android personally-owned compliance and security"},{"href":"device-security/security-configurations/ios-ipados-compliance","toc_title":"iOS/iPadOS device compliance"},{"href":"device-security/security-configurations/ios-ipados-personal","toc_title":"iOS/iPadOS personal device security"},{"href":"device-security/security-configurations/ios-ipados-supervised","toc_title":"iOS/iPadOS supervised device security"}],"toc_title":"Zero Trust configuration examples"}],"toc_title":"Endpoint protection"},{"children":[{"children":[{"href":"device-security/identity-protection/configure-tenant-wide-policy","toc_title":"Configure at enrollment"},{"href":"device-security/identity-protection/deploy-group-policy","toc_title":"Configure after enrollment"}],"toc_title":"Windows Hello for Business"},{"displayName":"NAC","href":"device-security/integrate-network-access-control","toc_title":"Network access control"},{"children":[{"href":"fundamentals/certificates/overview","toc_title":"Use certificates for authentication"},{"href":"/intune/device-configuration/certificates/trusted-root-profiles","toc_title":"Trusted certificate profiles"},{"children":[{"href":"fundamentals/certificates/connector/overview","toc_title":"Certificate Connector overview"},{"href":"fundamentals/certificates/connector/prerequisites","toc_title":"Connector prerequisites"},{"href":"fundamentals/certificates/connector/setup-connector","toc_title":"Set up the connector"},{"href":"/troubleshoot/mem/intune/troubleshoot-certificate-connector-events?context=/intune/context","toc_title":"Troubleshoot certificate connector"},{"href":"fundamentals/certificates/connector/certificate-connectors","toc_title":"Deprecated certificate connectors"}],"toc_title":"Certificate Connector"},{"children":[{"href":"fundamentals/certificates/scep-infrastructure","toc_title":"SCEP infrastructure"},{"href":"/intune/device-configuration/certificates/scep-profiles","toc_title":"SCEP certificate profiles"},{"href":"fundamentals/certificates/third-party-ca-scep","toc_title":"Use third-party certificate authority with SCEP"},{"children":[{"href":"/troubleshoot/mem/intune/troubleshoot-scep-certificate-profiles?context=/intune/context","toc_title":"Troubleshoot SCEP certificate profiles"},{"href":"/troubleshoot/mem/intune/troubleshoot-scep-certificate-profile-deployment?context=/intune/context","toc_title":"Profile deployment to devices"},{"href":"/troubleshoot/mem/intune/troubleshoot-scep-certificate-device-to-ndes?context=/intune/context","toc_title":"Device to NDES communication"},{"href":"/troubleshoot/mem/intune/troubleshoot-scep-certificate-ndes-policy-module?context=/intune/context","toc_title":"NDES operations"},{"href":"/troubleshoot/mem/intune/troubleshoot-scep-certificate-delivery?context=/intune/context","toc_title":"Certificate delivery to devices"},{"href":"/troubleshoot/mem/intune/troubleshoot-scep-certificate-reporting?context=/intune/context","toc_title":"Reporting for certificate deployment"}],"toc_title":"Troubleshoot SCEP certificate profiles"}],"toc_title":"SCEP"},{"children":[{"href":"device-configuration/certificates/pkcs-profiles","toc_title":"PKCS certificate profiles"},{"displayName":"csr","href":"device-configuration/certificates/imported-pfx-profiles","toc_title":"Imported PKCS (PFX)"},{"href":"/troubleshoot/mem/intune/troubleshoot-pkcs-certificate-profiles?context=/intune/context","toc_title":"Troubleshoot PKCS certificate profiles"}],"toc_title":"PKCS"},{"href":"fundamentals/certificates/digicert-pkcs","toc_title":"Use DigiCert PKI"},{"href":"device-configuration/certificates/remove-profiles","toc_title":"Remove SCEP or PKCS certificates"},{"href":"device-security/certificates/derived-credentials","toc_title":"Derived credentials"},{"href":"device-security/certificates/s-mime","toc_title":"Use S/MIME to encrypt email"},{"href":"fundamentals/certificates/ref-scep-api","toc_title":"API to add third-party certificate authority"}],"toc_title":"Certificate infrastructure"},{"children":[{"displayName":"RBAC, requirements","href":"cloud-pki/","toc_title":"Microsoft Cloud PKI overview"},{"href":"cloud-pki/fundamentals","toc_title":"PKI fundamentals"},{"children":[{"href":"cloud-pki/deployment-models","toc_title":"Deployment overview"},{"displayName":"root, certification, authority, ca, issuing, BYO","href":"cloud-pki/configure-ca","toc_title":"Configure root and issuing CA for Cloud PKI"},{"href":"cloud-pki/configure-byoca","toc_title":"Configure bring your own CA for Cloud PKI"},{"href":"cloud-pki/renew-ca","toc_title":"Renew a Cloud PKI CA"}],"toc_title":"Configure and deploy"},{"href":"cloud-pki/monitor-certificates","toc_title":"Monitor issued certificates"},{"href":"cloud-pki/audit-logs","toc_title":"Get audit logs"},{"href":"cloud-pki/delete-ca","toc_title":"Pause, revoke, and delete CA"}],"toc_title":"Microsoft Cloud PKI"}],"toc_title":"Identity and access control"},{"children":[{"children":[{"href":"device-security/laps/overview","toc_title":"Windows LAPS overview"},{"href":"device-security/laps/deploy-policy","toc_title":"Deploy Windows LAPS policy"},{"href":"device-security/laps/monitor","toc_title":"Windows LAPS reports"},{"href":"device-security/laps/setup-macos","toc_title":"macOS LAPS"}],"toc_title":"LAPS"},{"children":[{"href":"epm/overview","toc_title":"EPM overview"},{"href":"epm/deployment-planning","toc_title":"Planning EPM"},{"href":"epm/ref-data-collection","toc_title":"Data and privacy for EPM"},{"children":[{"href":"epm/deploy","toc_title":"Deploying EPM"},{"href":"epm/manage-elevation-settings","toc_title":"Create elevation settings policy"},{"href":"epm/create-elevation-rules","toc_title":"Create elevation rules policy"},{"href":"epm/manage-system-settings","toc_title":"Create elevation system settings policy"},{"href":"epm/tutorial-admin-to-standard-user","toc_title":"EPM Tutorial - Shift Administrators to Standard User"}],"toc_title":"Deploying EPM"},{"children":[{"href":"epm/manage-support-approvals","toc_title":"Support approved requests"}],"toc_title":"Using EPM"},{"children":[{"href":"epm/monitor-reports","toc_title":"Reports"},{"href":"epm/frequently-asked-questions","toc_title":"FAQs"},{"href":"epm/troubleshoot-known-issues","toc_title":"Known Issues"}],"toc_title":"Troubleshoot and Monitor"}],"toc_title":"Endpoint Privilege Management"}],"toc_title":"Account protection"},{"children":[{"href":"device-security/security-update-status-dashboard","toc_title":"Security update status dashboard"}],"toc_title":"Monitor"}],"href":"device-security/","toc_title":"Secure devices and data"},{"children":[{"children":[{"href":"device-updates/manage-os-versions","toc_title":"Manage OS versions across devices"},{"displayName":"software updates, android, ios, ipados","href":"device-updates/byod-planning-guide","toc_title":"BYOD and personal devices"},{"displayName":"software updates","href":"device-updates/android/planning-guide","toc_title":"Android"},{"displayName":"software updates","href":"device-updates/apple/planning-guide-ios-ipados","toc_title":"iOS/iPadOS"},{"displayName":"software updates","href":"device-updates/apple/planning-guide-macos","toc_title":"macOS"}],"toc_title":"Planning guides"},{"children":[{"displayName":"fota updates firmware android","href":"device-updates/android/manage-fota","toc_title":"Firmware Over-the-Air updates"},{"displayName":"fota, updates, android, samsung, knox, e-fota, over the air","href":"device-updates/android/setup-samsung-knox","toc_title":"Samsung Knox E-FOTA integration"},{"displayName":"ota, updates, android, fota, over the air","href":"device-updates/android/setup-zebra-lifeguard","toc_title":"Zebra LifeGuard OTA integration"}],"toc_title":"Android updates"},{"children":[{"displayName":"apple updates ios macos","href":"device-updates/apple/","toc_title":"Configure software updates"},{"displayName":"apple updates ios macos","href":"device-updates/apple/monitor-reports","toc_title":"Software update reports"},{"href":"device-updates/apple/deprecated-mdm-policies-ios","toc_title":"iOS/iPadOS update policies (deprecated)"},{"href":"device-updates/apple/deprecated-mdm-policies-macos","toc_title":"macOS update policies (deprecated)"}],"toc_title":"Apple updates"},{"children":[{"displayName":"windows updates","href":"device-updates/windows/","toc_title":"Windows updates overview"},{"children":[{"displayName":"windows updates, rings","href":"device-updates/windows/manage-update-rings","toc_title":"Manage update rings"},{"displayName":"windows updates, rings","href":"device-updates/windows/ref-update-ring-settings","toc_title":"Update ring settings"},{"displayName":"windows updates, rings","href":"device-updates/windows/monitor-update-rings","toc_title":"Update ring reports"}],"toc_title":"Update rings"},{"children":[{"displayName":"windows feature updates","href":"device-updates/windows/manage-feature-updates","toc_title":"Manage feature updates"},{"displayName":"windows feature updates","href":"device-updates/windows/configure-feature-update-policy","toc_title":"Feature update policy settings"},{"displayName":"windows updates","href":"device-updates/windows/configure-rollout-options","toc_title":"Rollout options"},{"href":"device-updates/windows/upgrade-to-windows-11","toc_title":"Upgrade Windows 10 devices"},{"displayName":"windows feature updates","href":"device-updates/windows/monitor-feature-updates","toc_title":"Feature update reports"},{"displayName":"windows updates, reports","href":"device-updates/windows/monitor-compatibility","toc_title":"Compatibility reports"}],"toc_title":"Feature updates"},{"children":[{"displayName":"windows quality updates","href":"device-updates/windows/manage-quality-updates","toc_title":"Manage quality updates"},{"displayName":"windows quality updates","href":"device-updates/windows/configure-hotpatch","toc_title":"Use hotpatch with quality updates"},{"displayName":"windows quality updates","href":"device-updates/windows/configure-expedite-policy","toc_title":"Expedite quality updates"},{"displayName":"windows quality updates","href":"device-updates/windows/monitor-quality-updates","toc_title":"Quality update reports"}],"toc_title":"Quality updates"},{"children":[{"displayName":"windows driver updates","href":"device-updates/windows/manage-driver-updates","toc_title":"Manage driver updates"},{"displayName":"windows driver updates","href":"device-updates/windows/configure-driver-update-policy","toc_title":"Driver update policy settings"},{"displayName":"windows driver updates","href":"device-updates/windows/monitor-driver-updates","toc_title":"Driver update reports"},{"displayName":"windows driver updates","href":"device-updates/windows/driver-updates-faq","toc_title":"Driver updates FAQ"}],"toc_title":"Driver updates"},{"displayName":"delivery optimization, windows updates","href":"device-configuration/templates/configure-delivery-optimization-windows","toc_title":"Delivery Optimization"},{"href":"/windows/deployment/windows-autopatch/?context=/intune/context","toc_title":"Windows Autopatch documentation"}],"toc_title":"Windows updates"},{"href":"device-updates/windows/ref-agent-error-codes","toc_title":"Software update agent error codes"}],"href":"device-updates/","toc_title":"Keep devices updated"},{"children":[{"children":[{"displayName":"deployment plans, rings, gradual rollout, phased deployment","href":"device-management/deployments/overview","toc_title":"Deployments overview"},{"href":"device-management/deployments/create-deployment-plan","toc_title":"Create a deployment plan"},{"href":"device-management/deployments/create-deployment","toc_title":"Create a deployment"},{"href":"device-management/deployments/rbac-scope-tags","toc_title":"Permissions, scope tags, and approvals"},{"href":"device-management/deployments/known-issues","toc_title":"Known issues"}],"toc_title":"Deployments"},{"href":"device-management/overview","toc_title":"\uD83D\uDFE2 Device management overview"},{"children":[{"displayName":"remote actions","href":"device-management/actions/","toc_title":"Device actions overview"},{"displayName":"remote action","href":"device-management/actions/autopilot-reset","toc_title":"Autopilot Reset"},{"displayName":"remote action","href":"device-management/actions/rotate-bitlocker-keys","toc_title":"BitLocker key rotation"},{"displayName":"remote action","href":"device-management/actions/collect-diagnostics","toc_title":"Collect diagnostics"},{"displayName":"remote action","href":"device-management/actions/disable-activation-lock","toc_title":"Disable Activation Lock"},{"displayName":"remote action","href":"device-management/actions/delete","toc_title":"Delete"},{"displayName":"remote action","href":"device-management/actions/deprovision","toc_title":"Deprovision"},{"displayName":"apple, applecare, ios, ipados, macos, sysdiagnose, logs","href":"device-management/actions/apple-enhanced-logging","toc_title":"Enhanced log collection"},{"displayName":"remote action","href":"device-management/actions/fresh-start","toc_title":"Fresh Start"},{"displayName":"remote action","href":"device-management/actions/full-scan","toc_title":"Full scan"},{"displayName":"remote action","href":"device-management/actions/locate","toc_title":"Locate device"},{"displayName":"remote action","href":"device-management/actions/logout-user","toc_title":"Logout current user"},{"displayName":"remote action","href":"device-management/actions/lost-mode","toc_title":"Lost Mode"},{"displayName":"remote action","href":"device-management/actions/remote-assist","toc_title":"New remote assistance session"},{"displayName":"remote action","href":"device-management/actions/pause-config-refresh","toc_title":"Pause config refresh"},{"displayName":"remote action","href":"device-management/actions/play-lost-mode-sound","toc_title":"Play Lost Mode sound"},{"displayName":"remote action","href":"device-management/actions/quick-scan","toc_title":"Quick scan"},{"displayName":"remote action","href":"device-management/actions/remote-lock","toc_title":"Remote lock"},{"displayName":"remote action","href":"device-management/actions/remove-apps-config","toc_title":"Remove apps and configuration"},{"displayName":"remote action","href":"device-management/actions/remove-passcode","toc_title":"Remove passcode"},{"displayName":"remote action","href":"device-management/actions/remove-user","toc_title":"Remove user"},{"displayName":"remote action","href":"device-management/actions/reset-passcode","toc_title":"Reset passcode"},{"displayName":"remote action","href":"device-management/actions/restart","toc_title":"Restart"},{"displayName":"remote action","href":"device-management/actions/restore-managed-home-screen","toc_title":"Restore managed home screen"},{"displayName":"remote action","href":"device-management/actions/retire","toc_title":"Retire"},{"displayName":"remote action","href":"device-management/actions/rotate-local-admin-password","toc_title":"Rotate local admin password"},{"displayName":"remote action","href":"device-management/actions/rotate-filevault-recovery-key","toc_title":"Rotate FileVault recovery key"},{"displayName":"remote action","href":"device-management/actions/rotate-recovery-lock-passcode","toc_title":"Rotate Recovery Lock passcode"},{"displayName":"remote action","href":"device-management/actions/run-remediation","toc_title":"Run remediation"},{"displayName":"remote action","href":"device-management/actions/send-custom-notification","toc_title":"Send custom notification"},{"displayName":"remote action","href":"device-management/actions/shutdown","toc_title":"Shutdown"},{"displayName":"remote action","href":"device-management/actions/sync","toc_title":"Sync"},{"displayName":"remote action","href":"device-management/actions/suspend-managed-home-screen","toc_title":"Suspend managed home screen"},{"displayName":"remote action","href":"device-management/actions/update-cellular-data-plan","toc_title":"Manage eSIM cellular plans"},{"href":"device-management/actions/wipe","toc_title":"Wipe"},{"href":"/troubleshoot/mem/intune/troubleshoot-device-actions?context=/intune/context","toc_title":"Troubleshoot device actions"}],"toc_title":"Device actions"},{"children":[{"href":"device-management/inventory-and-status/device-details","toc_title":"\uD83D\uDFE2 View device details"},{"href":"device-management/inventory-and-status/chrome-enterprise-details","toc_title":"View ChromeOS device information"},{"href":"device-management/inventory-and-status/edit-device-properties","toc_title":"\uD83D\uDFE2 Edit device properties"},{"href":"device-management/inventory-and-status/rename-device","toc_title":"\uD83D\uDFE2 Rename a device"},{"href":"device-management/inventory-and-status/find-primary-user","toc_title":"Change primary user"},{"href":"device-management/create-device-categories","toc_title":"Device categories"}],"toc_title":"Device inventory and organization"},{"href":"device-management/specialty-devices","toc_title":"Manage specialty devices"},{"children":[{"displayName":"IME, PowerShell, Win32","href":"device-management/tools/management-extension-windows","toc_title":"Intune Management Extension"},{"href":"device-management/tools/run-powershell-scripts-windows","toc_title":"PowerShell scripts for Windows"},{"href":"device-management/tools/run-shell-scripts-macos","toc_title":"Shell scripts for macOS"},{"displayName":"proactive remediations, scripts","href":"device-management/tools/deploy-remediations","toc_title":"Deploy remediations"},{"href":"device-management/tools/ref-remediation-scripts","toc_title":"Remediation scripts reference"}],"toc_title":"Scripts and remediations"},{"children":[{"href":"device-management/reports/overview","toc_title":"Reports overview"},{"href":"device-management/reports/export-graph-apis","toc_title":"Export reports using Graph APIs"},{"href":"device-management/reports/ref-graph-available-reports","toc_title":"Graph API report properties"}],"toc_title":"Reports"},{"children":[{"href":"device-management/tools/surface-management-portal","toc_title":"Surface Management Portal"},{"href":"device-management/tools/setup-servicenow","toc_title":"ServiceNow integration"},{"href":"device-management/tools/setup-teamviewer","toc_title":"TeamViewer integration"},{"href":"device-management/tools/teamviewer-legacy","toc_title":"TeamViewer connector (legacy)"}],"toc_title":"Integrations"}],"href":"device-management/","toc_title":"Manage devices"},{"children":[{"displayName":"ai, copilot, explore, data, query","href":"copilot/explorer","toc_title":"Explore your Intune data"},{"href":"copilot/troubleshoot-devices","toc_title":"Troubleshoot a device using Copilot"},{"href":"copilot/faq","toc_title":"Copilot in Intune FAQ"},{"href":"copilot/security-copilot","toc_title":"Intune plugin in Security Copilot"},{"displayName":"ai, copilot, surface, models, fleet, warranty","href":"/surface/security-copilot-surface-management-portal?context=/intune/context","toc_title":"Copilot in Surface Management Portal"},{"href":"/windows-365/enterprise/copilot-in-intune-for-windows365?context=/intune/context","toc_title":"Copilot in Windows 365 Cloud PCs"},{"children":[{"displayName":"security copilot agent","href":"copilot/agents/","toc_title":"Security Copilot agents overview"},{"children":[{"displayName":"Change Review Agent","href":"copilot/agents/change-review-agent","toc_title":"Get started"},{"displayName":"Change Review Agent","href":"copilot/agents/manage-change-review-agent","toc_title":"Use the agent"}],"toc_title":"Change Review Agent"},{"children":[{"displayName":"Device Offboarding Agent","href":"copilot/agents/device-offboarding-agent","toc_title":"Get started"},{"displayName":"Device Offboarding Agent","href":"copilot/agents/manage-device-offboarding-agent","toc_title":"Use the agent"}],"toc_title":"Device Offboarding Agent"},{"children":[{"displayName":"Policy Configuration Agent","href":"copilot/agents/policy-configuration-agent","toc_title":"Get started"},{"displayName":"Policy Configuration Agent","href":"copilot/agents/manage-policy-configuration-agent","toc_title":"Use the agent"}],"toc_title":"Policy Configuration Agent"},{"children":[{"displayName":"Vulnerability Remediation Agent","href":"copilot/agents/vulnerability-remediation-agent","toc_title":"Get started"},{"displayName":"Vulnerability Remediation Agent","href":"copilot/agents/manage-vulnerability-remediation-agent","toc_title":"Use the agent"}],"toc_title":"Vulnerability Remediation Agent"}],"toc_title":"Security Copilot agents in Microsoft Intune"},{"href":"/copilot/security/rai-faqs-security-copilot-agents?context=/intune/context","toc_title":"Responsible AI FAQ"}],"href":"copilot/","toc_title":"Copilot and agents"},{"children":[{"children":[{"href":"fundamentals/role-based-access-control/overview","toc_title":"Role-based access control overview"},{"href":"fundamentals/role-based-access-control/ref-built-in-roles","toc_title":"Built-in roles permissions reference"},{"href":"fundamentals/role-based-access-control/assign-role","toc_title":"Assign a role to a user"},{"href":"fundamentals/role-based-access-control/create-custom-role","toc_title":"Create a custom role"},{"href":"fundamentals/role-based-access-control/scope-tags","toc_title":"Use scope tags to determine what admins can see"},{"displayName":"distributed IT, many admins, scale, guidelines","href":"fundamentals/scale-guidelines","toc_title":"Determine admin structure"},{"displayName":"multi-admin approval, maa","href":"fundamentals/role-based-access-control/multi-admin-approval","toc_title":"Configure multiple admin approvals"}],"toc_title":"Role-based access control"},{"children":[{"href":"governance/admin-tasks","toc_title":"Admin tasks"},{"href":"governance/tenant-status","toc_title":"Tenant status and health"},{"href":"governance/monitor-audit-logs","toc_title":"Audit logs for Intune activities"},{"href":"governance/integrate-azure-monitor","toc_title":"Review logs with Azure Monitor"},{"href":"governance/configure-cleanup-rules","toc_title":"Device cleanup rules"}],"toc_title":"Tenant administration"},{"children":[{"href":"privacy/","toc_title":"Privacy overview"},{"children":[{"href":"privacy/data-handling/data-collection","toc_title":"Data collection"},{"href":"privacy/data-handling/data-storage-processing","toc_title":"Data storage and processing"},{"href":"privacy/data-handling/optional-diagnostic-data","toc_title":"Optional diagnostic data"},{"href":"privacy/enable-windows-diagnostic-data","toc_title":"Windows diagnostic data requirements"}],"toc_title":"Data collection and processing"},{"children":[{"href":"privacy/data-sharing/","toc_title":"Third-party data sharing overview"},{"href":"privacy/data-sharing/ref-apple-to-intune","toc_title":"Data Apple sends to Intune"},{"href":"privacy/data-sharing/ref-google-to-intune","toc_title":"Data Google sends to Intune"},{"href":"privacy/data-sharing/ref-jamf-to-intune","toc_title":"Data Jamf sends to Intune"},{"href":"privacy/data-sharing/ref-intune-to-apple","toc_title":"Data Intune sends to Apple"},{"href":"privacy/data-sharing/ref-intune-to-google","toc_title":"Data Intune sends to Google"},{"href":"privacy/data-sharing/ref-intune-to-zebra","toc_title":"Data Intune sends to Zebra"}],"toc_title":"Third-party data sharing"},{"children":[{"href":"privacy/personal-data/data-visibility","toc_title":"View and correct personal data"},{"href":"privacy/personal-data/manage-data-requests","toc_title":"Audit, export, and delete"}],"toc_title":"Manage personal data"}],"toc_title":"Privacy and personal data"}],"displayName":"RBAC, roles, scope tags, audit, privacy, GDPR, HIPAA, SOC, ISO","homepage":"govern-administer","href":"govern-administer","toc_title":"Govern and administer"},{"children":[{"children":[{"displayName":"endpoint analytics","href":"endpoint-analytics/","toc_title":"Overview"},{"displayName":"endpoint analytics, setup, prerequisites, enable, onboard","href":"endpoint-analytics/configure","toc_title":"Configure the service"},{"displayName":"endpoint analytics, scores, baselines, benchmarks, insights","href":"endpoint-analytics/scores","toc_title":"Scores, baselines, and insights"},{"children":[{"displayName":"endpoint analytics report, boot time, login, sign-in, slow startup","href":"endpoint-analytics/startup-performance","toc_title":"Startup performance"},{"displayName":"endpoint analytics report, app crashes, hangs, freezes","href":"endpoint-analytics/app-reliability","toc_title":"Application reliability"},{"displayName":"endpoint analytics report, remote work, cloud identity, cloud management","href":"endpoint-analytics/work-from-anywhere","toc_title":"Work from anywhere"}],"toc_title":"Reports"},{"displayName":"endpoint analytics, Microsoft Adoption Score, productivity score","href":"endpoint-analytics/adoption-score","toc_title":"Adoption Score integration"},{"displayName":"endpoint analytics, telemetry, data, privacy","href":"endpoint-analytics/ref-data-collection","toc_title":"Data collection"},{"displayName":"endpoint analytics, troubleshoot, errors, issues","href":"endpoint-analytics/troubleshoot","toc_title":"Troubleshooting"},{"displayName":"endpoint analytics, support, contact, help","href":"endpoint-analytics/support","toc_title":"Support options"}],"toc_title":"Endpoint analytics"},{"children":[{"displayName":"Advanced Analytics","href":"advanced-analytics/","toc_title":"Overview"},{"children":[{"displayName":"Advanced Analytics, CPU, memory, slow devices, performance issues","href":"advanced-analytics/resource-performance","toc_title":"Resource performance"},{"displayName":"Advanced Analytics, battery, power, charge","href":"advanced-analytics/battery-health","toc_title":"Battery health"},{"displayName":"Advanced Analytics, anomaly detection, outliers, unusual","href":"advanced-analytics/anomalies","toc_title":"Anomalies"},{"href":"advanced-analytics/device-timeline","toc_title":"Device timeline"}],"displayName":"Advanced Analytics, history, events, audit, timeline","toc_title":"Reports"},{"displayName":"Advanced Analytics, KQL, Kusto, real-time","href":"advanced-analytics/device-query","toc_title":"Device query"},{"displayName":"Advanced Analytics, KQL, fleet, bulk","href":"advanced-analytics/device-query-multiple-devices","toc_title":"Multi-device query"},{"displayName":"Advanced Analytics, scope, RBAC, filter","href":"advanced-analytics/device-scopes","toc_title":"Device scopes"},{"displayName":"Advanced Analytics, schema, reference, tables, fields","href":"advanced-analytics/ref-data-platform-schema","toc_title":"Data platform schema"},{"displayName":"Advanced Analytics, FAQs","href":"advanced-analytics/faq","toc_title":"Frequently asked questions"}],"toc_title":"Advanced Analytics"},{"children":[{"href":"remote-help/","toc_title":"Remote Help overview"},{"href":"remote-help/plan","toc_title":"Planning Remote Help"},{"href":"remote-help/deploy","toc_title":"Deploying Remote Help"},{"href":"remote-help/start-session","toc_title":"Using Remote Help"},{"href":"remote-help/troubleshoot","toc_title":"Troubleshooting Remote Help"}],"toc_title":"Remote Help"},{"children":[{"href":"fundamentals/it-pro-support/get-support-admin-center","toc_title":"Get support in the Intune admin center"},{"href":"fundamentals/it-pro-support/help-desk-operators","toc_title":"Help Desk operator role"},{"href":"/troubleshoot/mem/intune/welcome-intune?context=/intune/context","toc_title":"Troubleshoot issues"},{"displayName":"company portal, device user","href":"/intune/user-help","toc_title":"User help documentation"}],"toc_title":"Get help"}],"homepage":"monitor-troubleshoot","href":"monitor-troubleshoot","toc_title":"Monitor and troubleshoot"},{"children":[{"children":[{"href":"developer/configure-graph-api-access","toc_title":"Access Intune APIs with Microsoft Entra ID"},{"href":"/graph/api/resources/intune-graph-overview","toc_title":"Intune API reference"},{"href":"device-configuration/ref-graph-api-csp-windows","toc_title":"Graph APIs for device configuration"},{"href":"https://github.com/Microsoft/Intune-PowerShell-SDK/","toc_title":"Intune PowerShell SDK"}],"toc_title":"Intune APIs and automation"},{"children":[{"href":"developer/app-sdk/quickstart-integration","toc_title":"Get started with Intune App SDK"},{"href":"developer/app-sdk/integration-methods","toc_title":"Prepare LOB apps for app protection"},{"href":"app-management/deployment/ref-lob-app-versioning","toc_title":"LOB app versioning"},{"href":"developer/app-sdk/configure-wrapping-ios","toc_title":"App Wrapping Tool for iOS"},{"children":[{"href":"developer/app-sdk/ios-phase-1","toc_title":"Plan the integration"},{"href":"developer/app-sdk/ios-phase-2","toc_title":"MSAL prerequisite and setup"},{"href":"developer/app-sdk/ios-phase-3","toc_title":"Intune SDK integration into your iOS app"},{"href":"developer/app-sdk/ios-phase-4","toc_title":"App participation features"},{"href":"developer/app-sdk/ios-phase-5","toc_title":"Multi-identity"},{"href":"developer/app-sdk/ios-phase-6","toc_title":"App protection Conditional Access support"},{"href":"developer/app-sdk/ios-phase-7","toc_title":"Web-view features"},{"href":"developer/app-sdk/ios-appendix","toc_title":"Appendix"}],"toc_title":"Intune App SDK for iOS"},{"displayName":"dex","href":"developer/app-sdk/configure-wrapping-android","toc_title":"App Wrapping Tool for Android"},{"children":[{"href":"developer/app-sdk/android-phase-1","toc_title":"Plan the integration"},{"href":"developer/app-sdk/android-phase-2","toc_title":"Understand the MSAL prerequisite"},{"href":"developer/app-sdk/android-phase-3","toc_title":"Get started with MAM"},{"href":"developer/app-sdk/android-phase-4","toc_title":"MAM integration essentials"},{"href":"developer/app-sdk/android-phase-5","toc_title":"Multi-identity"},{"href":"developer/app-sdk/android-phase-6","toc_title":"App configuration"},{"href":"developer/app-sdk/android-phase-7","toc_title":"App participation features"},{"href":"developer/app-sdk/android-appendix","toc_title":"Appendix"}],"toc_title":"Intune App SDK for Android"},{"href":"developer/app-sdk/tunnel-mam-ios","toc_title":"Microsoft Tunnel for MAM SDK"}],"href":"developer/app-sdk/","toc_title":"Intune App SDK"},{"children":[{"href":"developer/data-warehouse/connect-power-bi","toc_title":"Connect with Power BI"},{"href":"developer/data-warehouse/create-report-odata","toc_title":"Create a report from the OData feed"},{"children":[{"href":"developer/data-warehouse/setup-rest-client","toc_title":"Get data with a REST client"},{"href":"developer/data-warehouse/ref-api-endpoints","toc_title":"API endpoint reference"},{"href":"developer/data-warehouse/configure-app-only-auth","toc_title":"Application-only authentication"},{"href":"developer/data-warehouse/ref-data-model","toc_title":"Data model"},{"href":"developer/data-warehouse/ref-collections","toc_title":"Collections"},{"href":"developer/data-warehouse/ref-user-timeline","toc_title":"User lifetime representation"},{"href":"developer/data-warehouse/ref-application","toc_title":"Application entities"},{"href":"developer/data-warehouse/ref-date","toc_title":"Date entity"},{"href":"developer/data-warehouse/ref-devices","toc_title":"Devices entities"},{"href":"developer/data-warehouse/ref-intune-management-extension","toc_title":"Management extension entity"},{"href":"developer/data-warehouse/ref-mobile-app-management","toc_title":"MAM entities"},{"href":"developer/data-warehouse/ref-policy","toc_title":"Policy entities"},{"href":"developer/data-warehouse/ref-user-device","toc_title":"User device association"},{"href":"developer/data-warehouse/ref-user","toc_title":"User entity"},{"href":"developer/data-warehouse/move-account-data","toc_title":"Move account data"}],"href":"developer/data-warehouse/","toc_title":"Data Warehouse API"},{"href":"developer/data-warehouse/changelog","toc_title":"Change log"}],"href":"developer/data-warehouse/create-reports","toc_title":"Intune Data Warehouse"}],"href":"developer/","toc_title":"Develop and automate"},{"children":[{"children":[{"displayName":"edu","href":"solutions/education/overview","toc_title":"What is Intune for Education"},{"href":"/intune-education/","toc_title":"Intune for Education docs \uD83D\uDD17"},{"children":[{"href":"solutions/education/tutorial-school-deployment/","toc_title":"Introduction"},{"children":[{"href":"solutions/education/tutorial-school-deployment/enrollment-planning","toc_title":"Enrollment methods"},{"href":"solutions/education/tutorial-school-deployment/grouping-and-targeting","toc_title":"Grouping and targeting"}],"toc_title":"1. Plan your deployment"},{"children":[{"href":"solutions/education/tutorial-school-deployment/setup-entra-id","toc_title":"Set up Microsoft Entra ID"},{"href":"solutions/education/tutorial-school-deployment/setup-intune","toc_title":"Set up Microsoft Intune"}],"toc_title":"2. Prepare your tenant"},{"children":[{"href":"solutions/education/tutorial-school-deployment/configure-overview","toc_title":"Configure settings overview"},{"href":"solutions/education/tutorial-school-deployment/configure-settings","toc_title":"Configure policies"},{"href":"solutions/education/tutorial-school-deployment/configure-apps","toc_title":"Configure applications"}],"toc_title":"3. Configure settings and applications"},{"children":[{"href":"solutions/education/tutorial-school-deployment/enroll-overview","toc_title":"Deploy devices overview"},{"children":[{"href":"solutions/education/tutorial-school-deployment/enroll-entra-join","toc_title":"Enroll devices via Microsoft Entra join"},{"href":"solutions/education/tutorial-school-deployment/enroll-package","toc_title":"Enroll devices with provisioning packages"},{"href":"solutions/education/tutorial-school-deployment/enroll-autopilot","toc_title":"Enroll devices with Windows Autopilot"}],"toc_title":"Windows"},{"children":[{"href":"solutions/education/tutorial-school-deployment/enroll-ios-company-portal","toc_title":"Enroll with Company Portal"},{"href":"solutions/education/tutorial-school-deployment/enroll-ios-ade","toc_title":"Enroll devices with Automated Device Enrollment"},{"href":"solutions/education/tutorial-school-deployment/enroll-ios-apple-configurator","toc_title":"Bulk enrollment with Apple Configurator"}],"toc_title":"iOS"}],"toc_title":"4. Deploy devices"},{"children":[{"href":"solutions/education/tutorial-school-deployment/manage-overview","toc_title":"Manage devices overview"},{"href":"solutions/education/tutorial-school-deployment/manage-surface","toc_title":"Management functionalities for Surface devices"},{"href":"solutions/education/tutorial-school-deployment/reset-devices","toc_title":"Reset and wipe devices"},{"href":"solutions/education/tutorial-school-deployment/policy-conflicts","toc_title":"Avoid policy conflicts"}],"toc_title":"5. Manage devices"},{"href":"solutions/education/tutorial-school-deployment/troubleshoot-overview","toc_title":"6. Troubleshoot and get help"},{"children":[{"href":"solutions/education/tutorial-school-deployment/ref-common-settings","toc_title":"Common Education configuration overview"},{"children":[{"href":"solutions/education/tutorial-school-deployment/ref-device-restrictions-settings-windows","toc_title":"Device restrictions"},{"href":"solutions/education/tutorial-school-deployment/ref-update-settings-windows","toc_title":"Windows Update"},{"href":"solutions/education/tutorial-school-deployment/ref-edge-settings-windows","toc_title":"Microsoft Edge"},{"href":"solutions/education/tutorial-school-deployment/ref-delivery-optimization-settings-windows","toc_title":"Delivery Optimization"},{"href":"solutions/education/tutorial-school-deployment/ref-privacy-settings-windows","toc_title":"Windows privacy"},{"href":"solutions/education/tutorial-school-deployment/ref-start-menu-settings-windows","toc_title":"Start menu customization"},{"href":"solutions/education/tutorial-school-deployment/ref-onedrive-knownfoldermove-settings-windows","toc_title":"OneDrive Known Folder Move"}],"toc_title":"Intune policies for Windows in Education"},{"children":[{"href":"solutions/education/tutorial-school-deployment/ref-device-restrictions-settings-ipados","toc_title":"Device restrictions"},{"href":"solutions/education/tutorial-school-deployment/ref-ai-restrictions-settings-ipados","toc_title":"Apple Intelligence"},{"href":"solutions/education/tutorial-school-deployment/ref-shared-device-settings-ipados","toc_title":"iPads with no user affinity"},{"href":"solutions/education/tutorial-school-deployment/ref-optional-restrictions-settings-ipados","toc_title":"Optional restrictions"}],"toc_title":"Intune policies for iPads in Education"}],"toc_title":"7. Common Education configuration"}],"toc_title":"Tutorial: How to deploy and manage devices in a school"}],"toc_title":"Education"},{"children":[{"href":"fundamentals/government-service","toc_title":"Intune US Government service description"},{"href":"/intune/fundamentals/endpoints-us-government","toc_title":"Intune US government endpoints"}],"toc_title":"Government"},{"children":[{"href":"fundamentals/china","toc_title":"Intune operated by 21Vianet in China"},{"href":"/intune/fundamentals/endpoints-china","toc_title":"China endpoints"}],"toc_title":"China"},{"children":[{"href":"solutions/passwordless","toc_title":"Passwordless authentication"},{"href":"solutions/ai/manage-ai-android","toc_title":"Manage AI on Android"},{"href":"device-updates/manage-os-versions","toc_title":"Manage operating system versions"},{"children":[{"href":"solutions/frontline-worker/","toc_title":"Frontline worker overview"},{"displayName":"Android Enterprise, ae, aosp, kiosk","href":"solutions/frontline-worker/android","toc_title":"Android FLW"},{"displayName":"ios, ipados, shared ipad, kiosk","href":"solutions/frontline-worker/ios-ipados","toc_title":"iOS/iPadOS FLW"},{"displayName":"kiosk, multi-app, single-app","href":"solutions/frontline-worker/windows","toc_title":"Windows FLW"}],"displayName":"android, ios, ipados, windows, kiosk","toc_title":"Frontline worker (FLW) device management"},{"children":[{"displayName":"cloud native endpoints, windows","href":"solutions/cloud-native-endpoints/overview","toc_title":"Cloud native endpoints overview"},{"displayName":"cloud native endpoints, windows","href":"solutions/cloud-native-endpoints/tutorial-cloud-native-setup","toc_title":"Tutorial-Get started with cloud native Windows endpoints"},{"children":[{"displayName":"cloud native endpoints, windows","href":"solutions/cloud-native-endpoints/entra-join-types","toc_title":"Microsoft Entra joined vs. Microsoft Entra hybrid joined"},{"displayName":"cloud native endpoints, windows","href":"solutions/cloud-native-endpoints/on-premises-resources","toc_title":"Access on-premises resources"}],"toc_title":"Microsoft Entra concepts and on-premises resources"},{"displayName":"cloud native endpoints, windows","href":"solutions/cloud-native-endpoints/planning-guide","toc_title":"Planning guide"},{"displayName":"cloud native endpoints, windows","href":"solutions/cloud-native-endpoints/troubleshoot","toc_title":"Known issues"}],"toc_title":"Cloud native endpoints"},{"href":"solutions/end-to-end-guides/macos-endpoints-get-started","toc_title":"End-to-end macOS endpoint guide"},{"href":"/microsoft-365/solutions/manage-devices-with-intune-overview","toc_title":"Zero Trust: Manage devices with Intune \uD83D\uDD17"},{"children":[{"href":"solutions/edge-data-security/overview","toc_title":"Edge data security overview"},{"href":"solutions/edge-data-security/conditional-access-step-1","toc_title":"Step 1. Create Microsoft Entra Conditional Access"},{"href":"solutions/edge-data-security/protection-policies-step-2","toc_title":"Step 2. Create an app protection policy"},{"href":"solutions/edge-data-security/threat-defense-step-3","toc_title":"Step 3. Integrate Mobile Threat Defense"},{"href":"solutions/edge-data-security/app-configuration-step-4","toc_title":"Step 4. Create app configuration policies"},{"href":"solutions/edge-data-security/settings-catalog-step-5","toc_title":"Step 5. Create Settings Catalog policies"},{"href":"solutions/edge-data-security/end-user-experience-step-6","toc_title":"Step 6. Understand end user experience"},{"href":"solutions/edge-data-security/troubleshoot-step-7","toc_title":"Step 7. Troubleshoot"}],"toc_title":"Secure your corporate data using Edge for Business"}],"toc_title":"Scenario-based guidance"}],"toc_title":"Industry and scenario guides"}],"metadata":{"brand":"Microsoft Intune","breadcrumb_path":"/intune/breadcrumb/toc.json","count_of_node_with_href":860,"feedback_system":"Standard","manager":"laurawi","ms.service":"microsoft-intune","open_to_public_contributors":true,"pdf_absolute_path":"/intune/opbuildpdf/toc.pdf","searchScope":["Intune"],"titleSuffix":"Microsoft Intune","uhfHeaderId":"MSDocsHeader-Intune"}}