Configurations policy mapping from Basic Mobility and Security to Intune

This article provides mapping details between Basic Mobility and Security to Intune. Specifically, this page maps Microsoft Purview compliance portal Configurations policies to the equivalent policies in Microsoft Intune admin center.

Intune offers more policy flexibility. So, each Office policy translates into multiple Intune and Microsoft Entra policies to achieve the same result.

If you're migrating from Basic Mobility and Security to Intune, you can use the Migration evaluation tool to automate much of this mapping.

To see these settings in the Microsoft Purview compliance portal, sign in to the Purview compliance portal. Then, select Device security policies > policy name > Edit policy > Configurations.

Important

Microsoft Intune is ending support for Android device administrator management on devices with access to Google Mobile Services (GMS) on August 30, 2024. After that date, device enrollment, technical support, bug fixes, and security fixes will be unavailable. If you currently use device administrator management, we recommend switching to another Android management option in Intune before support ends. For more information, read Ending support for Android device administrator on GMS devices.

Before you begin

To configure the settings in an Intune policy, sign in to the Microsoft Intune admin center. Role-based access control (RBAC) with Microsoft Intune lists and describes the built-in roles that can create policies.

Require encrypted backup

This setting was never supported for Windows or Android in Basic Mobility and Security.

One configuration profile:

• Devices > iOS/iPadOS > Configuration profiles > profile name > Properties > Compliance settings Edit > Cloud and Storage > Force encrypted backup

Block cloud backup

This setting was never supported for Windows or Android in Basic Mobility and Security.

This setting is only supported on supervices iOS devices.

One configuration profile:

• Devices > iOS/iPadOS > Configuration profiles > profile name > Properties > Configuration settings Edit > Cloud and Storage > various Block iCloud settings

Block document synchronization

This setting was never supported for Windows or Android in Basic Mobility and Security.

This setting is only supported on supervices iOS devices.

One configuration profile:

• Devices > iOS/iPadOS > Configuration profiles > profile name > Properties > Configuration settings Edit > Cloud and Storage > Block iCloud document and data sync

Block photo synchronization

This setting was never supported for Windows or Android in Basic Mobility and Security.

One configuration profile:

• Devices > iOS/iPadOS > Configuration profiles > profile name > Properties > Configuration settings Edit > Cloud and Storage > Block My Photo Stream

Block screen capture

For Android devices, this setting is only supported on Samsung Knox devices in Basic Mobility and Security.

Three configuration profiles:

• Devices > Windows > Configuration profiles > profile name > Properties > Configuration settings Edit > General > Screen capture (mobile only)
• Devices > iOS/iPadOS > Configuration profiles > profile name > Properties > Configuration settings Edit > General > Block screenshots and screen recording
• Devices > Android > Configuration profiles > profile name > Properties > Configuration settings Edit > General > Screen capture (Samsung KNOX only)

Block video conferences on device

This setting was never supported for Windows or Android in Basic Mobility and Security.

This setting is only supported on supervised iOS devices.

One configuration profile:

• Devices > iOS/iPadOS > Configuration profiles > profile name > Properties > Configuration settings Edit > Built-in Apps > Block FaceTime

Block sending diagnostic data from device

For Android devices, this setting is only supported on Samsung Knox devices in Basic Mobility and Security.

For Windows 10 devices, the most restrictive value prevents sending security-related data.

Three configuration profiles:

• Devices > Windows > Configuration profiles > profile name > Properties > Configuration settings Edit > Reporting and Telemetry > Share usage data

  Block sending diagnostic data from device value	Share usage data value
  Selected	Security
  Not selected	Not configured

• Devices > iOS/iPadOS > Configuration profiles > profile name > Properties > Configuration settings Edit > General > Block sending diagnostic and usage data to Apple

• Devices > Android > Configuration profiles > profile name > Properties > Configuration settings Edit > General > Diagnostic data (Samsung Knox only)

Block access to application store

For Android devices, this setting is only supported on Samsung Knox devices in Basic Mobility and Security.

For iOS, this setting is only supported on supervised iOS devices.

Three configuration profiles:

• Devices > Windows > Configuration profiles > profile name > Properties > Configuration settings Edit > App store > App store (mobile only)
• Devices > iOS/iPadOS > Configuration profiles > profile name > Properties > Configuration settings Edit > App store, Doc Viewing, Gaming > Block App store
• Devices > Android > Configuration profiles > choose a profile with type Device administrator > Properties > Configuration settings Edit > Google Play Store > Google Play store (Samsung Knox only)

Require password when accessing application store

This setting was never supported for Windows or Android in Basic Mobility and Security.

Apple doesn't block accessing the app store without a password, but blocks purchases without a password.

One configuration profile:

• Devices > iOS/iPadOS > Configuration profiles > profile name > Properties > Configuration settings Edit > App store, Doc Viewing, Gaming > Require iTunes Store password for all purchases

Block connection with removable storage

This setting was never supported for iOS/iPadOS in Basic Mobility and Security.

For Android devices, this setting is only supported on Samsung Knox devices in Basic Mobility and Security.

Two configuration profiles:

• Devices > Windows > Configuration profiles > profile name > Properties > Configuration settings Edit > General > Removable storage
• Devices > Android > Configuration profiles > choose a profile with type Device administrator > Properties > Configuration settings Edit > Cloud and Storage > Removable storage (Samsung Knox only)

Block Bluetooth connection

This setting was never supported for iOS/iPadOS in Basic Mobility and Security.

For Android devices, this setting is only supported on Samsung Knox devices in Basic Mobility and Security.

Two configuration profiles:

• Devices > Windows > Configuration profiles > profile name > Properties > Configuration settings Edit > > Cellular and connectivity > Bluetooth
• Devices > Android > Configuration profiles > choose a profile with type Device administrator > Properties > Configuration settings Edit > Cellular and connectivity > Bluetooth (Samsung Knox only)

Related article

To migrate these policies, you can use the Migration evaluation tool.