Use custom settings for Windows client devices in Intune
Note
Intune may support more settings than the settings listed in this article. Not all settings are documented, and won't be documented. To see the settings you can configure, create a device configuration policy, and select Settings Catalog. For more information, go to Settings catalog.
This article describes some of the different custom settings you can control on Windows client devices. As part of your mobile device management (MDM) solution, use these settings to configure settings that aren't built in to Intune.
For more information on custom profiles, go to Create a profile with custom settings.
These settings are added to a device configuration profile in Intune, and then assigned or deployed to your Windows client devices.
This feature applies to:
- Windows 11
- Windows 10
Windows client custom profiles use Open Mobile Alliance Uniform Resource Identifier (OMA-URI) settings to configure different features. These settings are typically used by mobile device manufacturers to control features on the device.
Windows client makes many Configuration Service Provider (CSP) settings available, such as Policy Configuration Service Provider (Policy CSP).
If you're looking for a specific setting, the Windows device restriction profile and the Settings catalog include many built-in settings. So, you may not need to enter custom values.
Before you begin
OMA-URI settings
Add: Enter the following settings:
Name: Enter a unique name for the OMA-URI setting to help you identify it in the list of settings.
Description: Enter a description that gives an overview of the setting, and any other important details.
OMA-URI (case sensitive): Enter the OMA-URI you want to use as a setting.
Data type: Select the data type you'll use for this OMA-URI setting. Your options:
- Base64 (file)
- Boolean
- String (XML file)
- Date and time
- String
- Floating point
- Integer
Value: Enter the data value you want to associate with the OMA-URI you entered. The value depends on the data type you selected. For example, if you select Date and time, select the value from a date picker.
After you add some settings, you can select Export. Export creates a list of all the values you added in a comma-separated values (.csv) file.
Find the policies you can configure
For a complete list of all configuration service providers (CSPs) that Windows client supports, go to the CSP reference.
Not all settings are compatible with all Windows client versions. The CSP reference lists the supported versions for each CSP.
Also, Intune doesn't support all the settings listed in CSP reference. To find out if Intune supports the setting you want, open the article for that setting. Each setting page shows its supported operation. To work with Intune, the setting must support the Add, Replace, and Get operations. If the value returned by the Get operation doesn't match the value supplied by the Add or Replace operations, then Intune reports a compliance error.
Note
For settings created using a string, base64, or XML data type, the stored value is obscured. If the user who is accessing the value has any of the following permissions or roles, they can see the value:
- A Microsoft Intune role that has the Device configurations > Create, Read, and Update permissions, like the Policy and Profile manager Intune built-in role.
- Intune Administrator Microsoft Entra role
For more information, go to: