Home

Intune policies for schools, assign different device policies for group of users

%3CLINGO-SUB%20id%3D%22lingo-sub-335207%22%20slang%3D%22en-US%22%3EIntune%20policies%20for%20schools%2C%20assign%20different%20device%20policies%20for%20group%20of%20users%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-335207%22%20slang%3D%22en-US%22%3E%3CP%3EHi%2C%3C%2FP%3E%3CP%3EI%20try%20to%20create%20the%20following%20scenario%2C%20but%20I%20have%20lucky%20results%2C%20and%20I%20still%20hope%2C%20that%20there%20is%20a%20working%20solution%E2%80%A6%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EDevices%20are%20azure%20ad%20joined%2C%20and%20managed%20by%20intune%2C%20so%20far%20so%20good.%20Used%20Windows%2010%20Enterprise%2C%201809%20with%20current%20patch%20level%2C%20and%20tried%20also%20with%20new%20Insider%20Preview%2018334.1%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20have%20a%20group%20for%20teachers%20and%20students%2C%20then%20I%20created%20a%20device%20policy%20%22Teacher%20Settings%22%20and%20%22Student%20Settings%22%20for%20Windows%2010.%20To%20simplify%20it%2C%20I%20set%20only%20a%20desktop%20wallpaper%2C%20teachers%20get%20a%20blue%20one%2C%20and%20students%20a%20yellow%20one.%20I%20set%20the%20assignment%20of%20the%20policies%20to%20the%20teacher%20group%20and%20to%20the%20student%20group.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ESo%20now%20I%20take%20one%20of%20my%20devices%2C%20and%20login%20as%20teacher%2C%20perfect%20I%20got%20my%20blue%20wallpaper.%3C%2FP%3E%3CP%3ENow%20I%20sign%20off%2C%20and%20sing%20in%20with%20a%20student%20account%2C%20and%20I%20expect%20a%20yellow%20wallpaper%2C%20but%20I%20got%20the%20blue%20one.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIf%20I%20take%20another%20device%2C%20and%20my%20first%20login%20is%20with%20the%20student%2C%20I%20got%20the%20correct%20yellow%20wallpaper%2C%20now%20I%20sign%20off%2C%20and%20on%20as%20teacher%2C%20guest%20what%20I%20see%2C%20yes%20the%20yellow%20wallpaper...%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20found%20a%20way%20to%20correct%20it%2C%20simply%20use%20taskmgr%20and%20restart%20explorer.exe%2C%20but%20this%20behavior%20couldn%E2%80%99t%20be%20correct.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThat%20was%20my%20first%20pitfall%2C%20but%20I%20tried%20to%20disallow%20students%20access%20settings%20app%2C%20but%20I%20allow%20teachers%20to%20access%20it%2C%20and%20the%20behavior%20is%20the%20same.%20Last%20policy%20that%20was%20used%2C%20wins%20over%20the%20next%20logon.%20Here%20helps%20the%20trick%2C%20running%20gpupdate%20after%20logon%2C%20and%20restart%20explorer.exe%20too...%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ESo%20any%20hints%2C%20tips%20to%20solve%20this%20issue%3F%3F%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-335207%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EIntune%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-335265%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20policies%20for%20schools%2C%20assign%20different%20device%20policies%20for%20group%20of%20users%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-335265%22%20slang%3D%22en-US%22%3E%3CP%3EHello%20Sebi%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20had%20the%20same%20issues.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EFor%20what%20I%20saw%20was%20that%20the%20policies%20come%20trhough%20after%20a%20couple%20of%20time.%3C%2FP%3E%3CP%3EThe%20Blue%20screen%20was%20there%20immidiatly%20but%20after%205%20minutes%20there%20is%20the%20blue%20wallpaper%20or%20the%20settings.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20don't%20now%20how%20this%20can%20be%20done%20quicker.%3C%2FP%3E%3C%2FLINGO-BODY%3E
sebi-aix
Occasional Visitor

Hi,

I try to create the following scenario, but I have lucky results, and I still hope, that there is a working solution…

 

Devices are azure ad joined, and managed by intune, so far so good. Used Windows 10 Enterprise, 1809 with current patch level, and tried also with new Insider Preview 18334.1

 

I have a group for teachers and students, then I created a device policy "Teacher Settings" and "Student Settings" for Windows 10. To simplify it, I set only a desktop wallpaper, teachers get a blue one, and students a yellow one. I set the assignment of the policies to the teacher group and to the student group.

 

So now I take one of my devices, and login as teacher, perfect I got my blue wallpaper.

Now I sign off, and sing in with a student account, and I expect a yellow wallpaper, but I got the blue one.

 

If I take another device, and my first login is with the student, I got the correct yellow wallpaper, now I sign off, and on as teacher, guest what I see, yes the yellow wallpaper...

 

I found a way to correct it, simply use taskmgr and restart explorer.exe, but this behavior couldn’t be correct.

 

That was my first pitfall, but I tried to disallow students access settings app, but I allow teachers to access it, and the behavior is the same. Last policy that was used, wins over the next logon. Here helps the trick, running gpupdate after logon, and restart explorer.exe too...

 

So any hints, tips to solve this issue???

 

1 Reply
Highlighted

Hello Sebi,

 

I had the same issues.

 

For what I saw was that the policies come trhough after a couple of time.

The Blue screen was there immidiatly but after 5 minutes there is the blue wallpaper or the settings.

 

I don't now how this can be done quicker.

Related Conversations
Tabs and Dark Mode
cjc2112 in Discussions on
46 Replies
Extentions Synchronization
Deleted in Discussions on
3 Replies
Stable version of Edge insider browser
HotCakeX in Discussions on
35 Replies
How to Prevent Teams from Auto-Launch
chenrylee in Microsoft Teams on
30 Replies
flashing a white screen while open new tab
Deleted in Discussions on
14 Replies
Security Community Webinars
Valon_Kolica in Security, Privacy & Compliance on
13 Replies