Forum Discussion

MCT

Dec 10, 2019

Solved

Understanding of custom policies / oma-uri / registry

Hi, i would like to understand the whole topic belonging custom policies / OMA-URI / registry a little deeper. I hope that some of you guys would like to join the disscussion to gain some new ...

gpo

Group Policy Object

Intune

mobile device management (mdm)

OMA-URI

Registry

Oliver Kieselbach
Dec 11, 2019
Hi PatrickF11,

in theory you can ingest every admx file but there are some path in the registry which are black listed (https://docs.microsoft.com/en-us/windows/client-management/mdm/win32-and-centennial-app-policy-configuration).

As already outlined I would focus on what is really necessary then I do not miss so much. Important are especially security settings and they are mostly all available.

For an introduction in Intune PowerShell script processing look at my blog posts here:

Deep dive Microsoft Intune Management Extension – PowerShell Scripts

Part 2, Deep dive Microsoft Intune Management Extension – PowerShell Scripts

Part 3, Deep dive Microsoft Intune Management Extension – Win32 Apps

best,

Oliver

PatrickF11

MCT

Dec 11, 2019

Hi Oliver Kieselbach & thank you for your reply.

I already know the administrative templates, but of course many options are not yet implemented.

That's why i'm asking on how to deal with this.

The potential conflicts when using admx ingest seems clear to me, but only hypothetically it is possible to ingest any admx files, not only 3rd Party, right?

Thank you for your powershell example.

At this point i 've avoided using powershell scripts with intune because a) i didn't tested it, yet / b) i didn't know how they work exactly.

Are the scripts only running once? How can i monitor settings i set via script?

Thank you in advance. 🙂

Oliver Kieselbach

MVP

Dec 11, 2019

Hi PatrickF11,

in theory you can ingest every admx file but there are some path in the registry which are black listed (https://docs.microsoft.com/en-us/windows/client-management/mdm/win32-and-centennial-app-policy-configuration).

As already outlined I would focus on what is really necessary then I do not miss so much. Important are especially security settings and they are mostly all available.

For an introduction in Intune PowerShell script processing look at my blog posts here:

Deep dive Microsoft Intune Management Extension – PowerShell Scripts

Part 2, Deep dive Microsoft Intune Management Extension – PowerShell Scripts

Part 3, Deep dive Microsoft Intune Management Extension – Win32 Apps

best,

Oliver

PatrickF11
MCT
Dec 12, 2019
Hi Oliver Kieselbach

I think i just have to rethink a little my mindset regarding the "GPO-World" 😄

Thank you for your ideas belonging this.

I've worked throught your really great blogposts 1&2 and i 'll continue with the 3rd one.
Thank you very much for your wonderful work which is really comprehensible with great examples and samples.

Many kudos to you! You're really a big benefit to the community.