Configuration Profiles

examlabpractice.com
 What are configuration profiles?
• Microsoft Intune includes settings and features you can enable or
disable on different devices within your organization.
• These settings and features are added to "configuration profiles".
1. You can create profiles for different devices and different
platforms, including iOS/iPadOS, Android device administrator,
Android Enterprise, and Windows.
2. Then, use Intune to apply or "assign" the profile to the
devices.
 Usage Examples
As part of your mobile device management (MDM) solution,
use these configuration profiles to complete different tasks.
Intune has many templates that include groups of settings that
are specific to a feature, such as certificates, VPN, email, and
more.

Some profile examples include:

• Allow or prevent access to bluetooth on the device.

• Create a WiFi or VPN profile that gives different devices
access to your corporate network.
• Manage software updates, including when they're installed.
• Run an Android device as dedicated kiosk device that can
run one app, or run many apps.
• On iOS/iPadOS and macOS devices, allow users to use
AirPrint printers in your organization.
 Main Options when creating a Profile
Device profiles allow you to add and configure settings, and then push
these settings to devices in your organization. You have some options
when creating policies:
• Administrative templates: On newer Windows devices, these
templates are ADMX settings that you configure. If you're familiar
with ADMX policies or group policy objects (GPO), then using
administrative templates is a natural step to Microsoft Intune.
• Baselines: On newer Windows devices, these baselines include
preconfigured security settings.
Main Options when creating a Profile (Continued)
Settings catalog: On newer Windows devices, use the settings catalog to see all the
available settings, and in one location. For example, you can see all the settings that apply
to BitLocker, and create a policy that just focuses on BitLocker. On macOS devices, use the
settings catalog to configure Microsoft Edge version 77 and settings.

On macOS, continue using the preference file to:

• Configure earlier versions of Microsoft Edge
• Configure Edge browser settings that aren't in settings catalog

Templates: On Android, iOS/iPadOS, macOS, and Windows devices, the templates include a
logical grouping of settings that configure a feature or concept, such as VPN, email, kiosk
devices, and more. If you're familiar with creating device configuration policies in Microsoft
Intune, then you're already using these templates.
Profile Creation