Device ConfigurationConfiguration Profiles

Configuration Profiles

25 mins

Understanding the Concept

Configuration profiles in Intune deliver device settings similar to Group Policy but through the cloud. Profile types include device restrictions, Wi-Fi, VPN, email, certificates, and custom profiles. Each profile type targets specific platform capabilities.

Device restriction profiles control features like camera, Bluetooth, screen capture, app store access, and password requirements. Wi-Fi profiles push wireless network configurations to devices automatically. VPN profiles configure always-on VPN or per-app VPN connections.

Profiles are assigned to user groups or device groups in Azure AD. Assignment filters can further refine targeting based on device properties like manufacturer, model, or OS version. Conflict resolution follows defined precedence when multiple profiles target the same setting.

Key Points

  • Configuration profiles replace Group Policy for cloud-managed devices
  • Profile types: device restrictions, Wi-Fi, VPN, email, certificates, custom
  • Assigned to Azure AD user groups or device groups
  • Assignment filters refine targeting by device properties
  • Conflict resolution: more restrictive setting wins for security settings
  • Platform-specific profiles required for each OS

Profile Delivery Flow

Step 1

Create

Admin creates configuration profile

Step 2

Assign

Target to user/device groups

Step 3

Deliver

Intune pushes to enrolled devices

Step 4

Apply

Device applies configuration

Why This Matters in Real Organizations

Configuration profiles ensure consistent device configuration across the organization without requiring network connectivity to an on-premises domain controller. This is essential for remote and hybrid workers who need the same security and productivity settings regardless of location.

Common Mistakes to Avoid

Creating too many profiles instead of consolidating settings
Not using assignment filters to target specific device models
Assigning profiles to 'All Users' or 'All Devices' without proper scoping
Not testing profiles on a pilot group before broad deployment

Interview Tips

  • Explain how configuration profiles compare to Group Policy
  • Discuss profile conflict resolution strategies
  • Describe your approach to organizing and naming profiles

Exam Tips (MD-102)

  • Know the available configuration profile types per platform
  • Understand assignment and assignment filter concepts
  • Know how profile conflicts are resolved
  • Be familiar with device restriction profile settings

Course Complete!

You've finished all lessons

←Previous|→Next|HHome