Add and use Wi-Fi settings on your devices in Microsoft Intune
Important
On October 22, 2022, Microsoft Intune ended support for devices running Windows 8.1. Technical assistance and automatic updates on these devices aren't available.
If you currently use Windows 8.1, then move to Windows 10/11 devices. Microsoft Intune has built-in security and device features that manage Windows 10/11 client devices.
Important
Microsoft Intune is ending support for Android device administrator management on devices with access to Google Mobile Services (GMS) on December 31, 2024. After that date, device enrollment, technical support, bug fixes, and security fixes will be unavailable. If you currently use device administrator management, we recommend switching to another Android management option in Intune before support ends. For more information, see Ending support for Android device administrator on GMS devices.
Wi-Fi is a wireless network that's used by many mobile devices to get network access. Microsoft Intune includes built-in Wi-Fi settings that can be deployed to users and devices in your organization. This group of settings is called a profile, and can be assigned to different users and groups. Once assigned, your users get access your organization's Wi-Fi network without configuring it themselves.
For example, you install a new Wi-Fi network named Contoso Wi-Fi. You then want to set up all iOS/iPadOS devices to connect to this network. Here's the process:
- You create a Wi-Fi profile that includes the settings that connect to the Contoso Wi-Fi wireless network.
- You assign the profile to a group that includes all users of iOS/iPadOS devices.
- Users find the new Contoso Wi-Fi network in the list of wireless networks on their devices. They can then connect to the network, using the authentication method of your choosing.
This article lists the steps to create a Wi-Fi profile. It also includes links that describe the different settings for each platform.
Before you begin
To create a Wi-Fi profile, you need to know the settings for your Wi-Fi network, including the SSID (service set identifier), security type, and more.
To configure the Wi-Fi policy, at a minimum, sign into the Intune admin center with the Policy and Profile manager role. For information on the built-in roles in Intune, and what they can do, go to Role-based access control (RBAC) with Microsoft Intune.
Wi-Fi profiles support the following device platforms:
- Android device administrator
- Android Enterprise and kiosk
- Android (AOSP)
- iOS/iPadOS
- macOS
- Windows
- Windows Holographic for Business
For specific versions, go to Supported operating systems and browsers in Intune.
Create the profile
Sign in to the Microsoft Intune admin center.
Select Devices > Manage devices > Configuration > Create > New policy.
Enter the following properties:
Platform: Select the platform of your devices. Your options:
- Android device administrator
- Android (AOSP)
- Android Enterprise
- iOS/iPadOS
- macOS
- Windows 10 and later
- Windows 8.1 and later
Profile type: Select Wi-Fi. Or, select Templates > Wi-Fi.
Tip
- For Android Enterprise devices running as a dedicated device (kiosk), select Fully Managed, Dedicated, and Corporate-Owned Work Profile > Wi-Fi.
- For Windows 8.1 and newer, you can choose Wi-Fi import. This option lets you import Wi-Fi settings as an XML file that you previously exported from a different device.
Select Create.
In Basics, enter the following properties:
- Name: Enter a descriptive name for the profile. Name your profiles so you can easily identify them later. For example, a good profile name is WiFi profile for entire company.
- Description: Enter a description for the profile. This setting is optional, but recommended.
Select Next.
In Configuration settings, depending on the platform you chose, the settings you can configure are different. Select your platform for detailed settings:
- Android device administrator
- Android (AOSP)
- Android Enterprise, including dedicated devices
- iOS/iPadOS
- macOS
- Windows 10/11
- Windows 8.1 and newer, including Windows Holographic for Business
Select Next.
In Scope tags (optional), assign a tag to filter the profile to specific IT groups, such as
US-NC IT Team
orJohnGlenn_ITDepartment
. For more information about scope tags, go to Use RBAC and scope tags for distributed IT.Select Next.
In Assignments, select the user or groups that will receive your profile. For more information on assigning profiles, go to Assign user and device profiles.
Select Next.
In Review + create, review your settings. When you select Create, your changes are saved, and the profile is assigned. The policy is also shown in the profiles list.
Tip
If you use certificate based authentication for your Wi-Fi profile, deploy the Wi-Fi profile, certificate profile, and trusted root profile to the same groups. This step makes sure that each device can recognize the legitimacy of your certificate authority. For more information, go to How to configure certificates with Microsoft Intune.