Use custom settings for Windows Holographic for Business devices in Intune

Using Microsoft Intune, you can add or create custom settings for your Windows Holographic for Business devices using custom profiles. Custom profiles are a feature in Intune. They're designed to add device settings and features that aren't built in to Intune.

Windows Holographic for Business custom profiles use Open Mobile Alliance Uniform Resource Identifier (OMA-URI) settings to configure different features. These settings are typically used by mobile device manufacturers to control features on the device.

Windows Holographic for Business makes many configuration service providers (CSPs) settings available. For a CSP overview, go to Introduction to configuration service providers (CSPs) for IT pros. For specific CSPs supported by Windows Holographic, go to CSPs supported in Windows Holographic.

If you're looking for a specific setting, remember that the Windows Holographic for Business device restriction profile includes many built-in settings. So, you might not need to enter custom values.

This article shows you how to create a custom profile for Windows Holographic for Business devices. It also includes a list of the recommended OMA-URI settings.

Before you begin

Custom OMA-URI Settings

Add: Enter the following settings:

  • Name: Enter a unique name for the OMA-URI setting so you can identify the setting in the settings list.

  • Description: Enter a description that gives an overview of the setting, and any other important details.

  • OMA-URI (case sensitive): Enter the OMA-URI you want to use as a setting.

  • Data type: Select the data type you want for this OMA-URI setting. Your options:

    • String
    • String (XML file)
    • Date and time
    • Integer
    • Floating point
    • Boolean
    • Base64 (file)
  • Value: Enter the data value you want to associate with the OMA-URI you entered. The value depends on the data type you selected. For example, if you select Date and time, select the value from a date picker.

After you add and Save your settings, you can select Export. Export creates a list of all the values you added in a comma-separated values (.csv) file.

The following settings are useful for devices running Windows Holographic for Business:

AllowFastReconnect

OMA-URI Data type
./Vendor/MSFT/Policy/Config/Authentication/AllowFastReconnect Integer
0 - not allowed
1 - allowed (default)

AllowUpdateService

OMA-URI Data type
./Vendor/MSFT/Policy/Config/Update/AllowUpdateService Integer
0 – Update service is not allowed
1 – Update service is allowed (default).

AllowVPN

OMA-URI Data type
./Vendor/MSFT/Policy/Config/Settings/AllowVPN Integer
0 - not allowed
1 - allowed (default)

RequireUpdateApproval

OMA-URI Data type
./Vendor/MSFT/Policy/Config/Update/RequireUpdateApproval This setting is available in RS5 (build 17763) and earlier. Starting with 19H1 (build 18362), use Windows Update for Business.

Integer
0 – Not configured. The device installs all applicable updates.
1 – The device only installs updates that are both applicable and on the Approved Updates list. Set this policy to 1 if IT wants to control the deployment of updates on devices, like when testing is required prior to deployment.

ScheduledInstallTime

OMA-URI Data type
./Vendor/MSFT/Policy/Config/Update/ScheduledInstallTime Integer 0-23, where 0=12AM and 23=11PM
Default value is 3.

UpdateServiceURL

OMA-URI Data type
./Vendor/MSFT/Policy/Config/Update/UpdateServiceUrl This setting is available in RS5 (build 17763) and earlier. Starting with 19H1 (build 18362), use Windows Update for Business.

String
URL - the device checks for updates from the WSUS server at the specified URL.
Not configured - The device checks for updates from Microsoft Update.

ApprovedUpdates

OMA-URI Data type
./Vendor/MSFT/Update/ApprovedUpdates/*GUID*

Important
You must read and accept the update EULAs on behalf of your end users. If you don't read and accept the EULA, it's a breach of legal or contractual obligations.
Node for update approvals and EULA acceptance on behalf of the end user.

For more information, go to Update CSP.

ApplicationLaunchRestrictions

OMA-URI Data type
./Vendor/MSFT/AppLocker/ApplicationLaunchRestrictions/*Grouping*/*ApplicationType*/Policy

Important
The AppLocker CSP article uses escaped XML examples. To configure the settings with Intune custom profiles, you must use plain XML.
String
For more information, go to AppLocker CSP.

DeletionPolicy

OMA-URI Data type
./Vendor/MSFT/AccountManagement/UserProfileManagement/DeletionPolicy Integer
0 - delete immediately when the device returns to a state with no currently active users
1 - delete at storage capacity threshold (default)
2 - delete at both storage capacity threshold and profile inactivity threshold

EnableProfileManager

OMA-URI Data type
./Vendor/MSFT/AccountManagement/UserProfileManagement/EnableProfileManager Boolean
True - enable
False - disable (default)

ProfileInactivityThreshold

OMA-URI Data type
./Vendor/MSFT/AccountManagement/UserProfileManagement/ProfileInactivityThreshold Integer
Default value is 30.

StorageCapacityStartDeletion

OMA-URI Data type
./Vendor/MSFT/AccountManagement/UserProfileManagement/StorageCapacityStartDeletion Integer
Default value is 25.

StorageCapacityStopDeletion

OMA-URI Data type
./Vendor/MSFT/AccountManagement/UserProfileManagement/StorageCapacityStopDeletion Integer
Default value is 50.

Find the policies you can configure

There's a complete list of all configuration service providers (CSPs) that Windows Holographic supports at CSPs supported in Windows Holographic. Not all settings are compatible with all Windows Holographic versions. The table in CSPs supported in Windows Holographic lists the supported versions for each CSP.

Also, Intune doesn't support all of the settings listed in CSPs supported in Windows Holographic. To find out if Intune supports the setting you want, open the article for that setting. Each setting page shows its supported operation. To work with Intune, the setting must support the Add or Replace operations.