Usually Not Configured and Disabled policy settings produce the same results. The difference is that Not Configured policy settings do not apply to the user, but Disabled policy settings apply to a user.
Each Administrative Template policy setting provides detailed information about its Enabled , Disabled , and Not Configured states. You can view this information in the Help pane of each Administrative Template policy setting. Or, you can view this information for the selected policy setting in the Extended View of the editor. The Configured property filter has three states: Any , Yes , and No.
Setting this property filter to Any causes the Local Group Policy Editor to display all Administrative Template policy settings and is the default setting for this filter. Setting this property filter to Yes causes the editor to show only configured Administrative Template policy settings, hiding not configured policy settings.
Setting this property filter to No causes the editor to show only not configured Administrative Template policy settings, hiding configured policy settings.
Each Administrative Template policy setting has a comment property. The Commented property allows you to enter text associated with a specific policy setting. The Commented property filter has three states: Any , Yes , and No. Setting this proper filter to Yes causes the editor to show only commented Administrative Template policy settings, hiding policy settings without comments.
Setting this property filter to No causes the editor to show only Administrative Template policy settings without comments, hiding commented policy settings. Click OK to apply the new filter settings and close the Filter Options dialog box.
Filters are inclusive, so select items you want to display rather than items you want to be removed. By default, the editor displays all policy settings. However, you can use keyword filters to change how the Local Group Policy Editor displays Administrative Template policy settings.
Type one or more keywords in the Filter for word s box, and click the appropriate filter:. Any : The filter includes any of the words in the Filter for word s box. All : The filter includes all of the words in the Filter for word s box.
Exact : The filter includes exact matches of the words in the Filter for word s box. Policy Setting Title : The filter includes searching the title of the policy setting. However, you can use requirement filters to change how the Local Group Policy Editor displays Administrative Template policy settings. How to setup Canned Responses in Gmail.
How to find your public and private IP address. How to get rid of the OneDrive sign in pop up every time you log into Windows. How to setup private browsing on any web browser. How to attach an application to the Windows taskbar. How to simply reinstall Windows 10 without the bloatware. The Admin Template has now been successfully configured enabled in our case. Computer configuration In another scenario, we want to edit administrative templates for a GPO to define the Domain Name System DNS to which computers in the group will send queries when trying to resolve names.
You created an administrative template in Intune. In this template, we configure some Internet Explorer settings to lock down devices shared by multiple students. In your Admin template - Windows 10 student devices , expand Computer configuration , select All settings , and search for Turn off InPrivate Browsing :. Select the Turn off InPrivate Browsing setting. In this window, notice the description and values you can set. These options are similar to what you see in group policy.
Also configure the following Internet Explorer settings. Be sure to select OK to save your changes. In your template, select Next until you get to Assignments. Choose Select groups to include :. A list of existing users and groups is shown. If you're using this tutorial in a production environment, then consider adding groups that are empty.
The goal is to practice assigning your template. Select Next. As soon as the profile is saved, it applies to the devices when they check in with Intune. If the devices are connected to the internet, it can happen immediately. For more information on policy refresh times, see How long does it take for devices to get a policy, profile, or app. When assigning strict or restrictive policies and profiles, don't lock yourself out. Consider creating a group that's excluded from your policies and profiles.
The idea is to have access to troubleshoot. Monitor this group to confirm it's being used as intended. In the Endpoint Manager admin center, you created an administrative template device configuration profile, and assigned this profile to a group you created.
In this section, you create a OneDrive admin template in Intune to control some settings. These specific settings are chosen because they're commonly used by organizations. In Configuration settings , configure the following settings. Be sure to select OK to save your changes:.
At this point, you created some administrative templates, and assigned them to groups you created. On the Admin computer , open Windows PowerShell as administrator:. Write down what it's set to, which may Restricted. When finished with the tutorial, set it back to its original value. PowerShell's execution policy helps prevent executing malicious scripts.
For more information, see About Execution Policies. It can take several minutes to complete. When finished, a prompt similar to the following prompt is shown:. Select Save as , and select a folder you'll remember. Open your folder, right-click the. Your folder structure looks similar to the following folder:. Right-click every. When prompted, sign in with the same Microsoft administrator account. These cmdlets create the policy in your tenant organization.
When these cmdlets succeed, the profile is created. Your Test Configuration profile should be listed. You see the Silently sign in users to the OneDrive sync client with their Windows credentials setting is configured. When creating policies and profiles in Intune, there are some recommendations and best practices to consider. For more information, see policy and profile best practices.
Set the Windows PowerShell execution policy back to its original value. The following example sets the execution policy to Restricted:. In this tutorial, you got more familiar with the Microsoft Endpoint Manager admin center , used the query builder to create dynamic groups, and created administrative templates in Intune to configure ADMX settings. As a bonus, you used PowerShell cmdlets to create an administrative template.
Use Windows 10 templates to configure group policy settings in Intune. Skip to main content. This browser is no longer supported.
0コメント