Microsoft Intune Device Configuration Profiles Flashcards

What format does Intune use for administrative templates (ADMX-backed policies) to configure Group Policy-equivalent settings?

Answer: Administrative Templates profile type in Device configuration

Intune's Administrative Templates profile type provides a cloud-based equivalent to ADMX Group Policy settings for Windows 10/11 devices.

Which setting in a Device restrictions profile prevents users from resetting their device using the Settings app?

Answer: Block factory reset

The 'Block factory reset' setting in a Device restrictions profile prevents users from using the Settings app to reset the device to factory defaults.

An Intune configuration profile shows a status of 'Not applicable' for several devices. What does this mean?

Answer: The profile settings do not apply to the OS version or device type

'Not applicable' means the profile's settings are not compatible with the device's OS, platform, or version, so the profile is intentionally skipped.

Which Intune profile type is used to deploy trusted root certificates to managed devices?

Answer: Trusted certificate profile under Device configuration

A Trusted certificate profile in Intune deploys root CA certificates to devices, which is often a prerequisite for SCEP or PKCS certificate profiles.

What is the check-in interval for Intune-managed Windows devices to retrieve new policies?

Answer: Every 8 hours with an initial check-in within 15 minutes of enrollment

Windows devices check in with Intune approximately every 8 hours, with an initial sync within 15 minutes of enrollment and after device restart.

Which Intune feature allows configuration profiles to be applied only when devices are on a corporate network?

Answer: Filters

Intune filters allow profiles to be dynamically included or excluded based on device properties, including network location when combined with Conditional Access.