Tech Community Live: Endpoint Manager edition
Jul 21 2022, 08:00 AM - 12:00 PM (PDT)
SOLVED

Intune Configuration Profiles and Versioning

%3CLINGO-SUB%20id%3D%22lingo-sub-2608346%22%20slang%3D%22en-US%22%3EIntune%20Configuration%20Profiles%20and%20Versioning%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2608346%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20Intune%20Legends%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIt%20would%20be%20a%20useful%20enhancement%20for%20Intune%20Configuration%20profiles%20to%20have%20a%20version%20number%2C%20and%20the%20endpoint%20device%20to%20pickup%20the%20configuration%20profile%20versioning.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20am%20trying%20to%20create%20Block%20and%20Allow%20policies%20for%20USB's.%20Short%20of%20creating%20a%20completely%20new%20configuration%20profile%20each%20time%2C%20its%20very%20difficult%20to%20confirm%20whether%20any%20configuration%20changes%20to%20an%20existing%20profile%20have%20pushed%20out%20to%20a%20test%20device.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIf%20I%20could%20pull%20out%20some%20type%20of%20versioning%20information%20from%20the%20endpoint%20device%20picking%20up%20the%20configuration%20profile%2C%20it%20would%20make%20testing%20a%20much%20happier%20process.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIt%20would%20take%20the%20guesswork%20out%20of%20whether%20a%20change%20has%20not%20applied%20to%20a%20device%20yet%20or%20not%20worked.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-2608346%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EIntune%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2783941%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Configuration%20Profiles%20and%20Versioning%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2783941%22%20slang%3D%22en-US%22%3EHi%2C%3CBR%20%2F%3E%3CBR%20%2F%3EIt's%20not%20a%20versionning%20like%20you%20want%2C%20but%20you%20can%20track%20configuration%20applied%20with%20eventvwr%20(DeviceManagement-Enterprise-Diagnostics-Provider)%20and%2For%20registry.%3CBR%20%2F%3E%3CBR%20%2F%3ECheck%20this%20post%20%3A%3CBR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Fwww.anoopcnair.com%2Fwindows-10-intune-mdm-support-help-1%2F%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fwww.anoopcnair.com%2Fwindows-10-intune-mdm-support-help-1%2F%3C%2FA%3E%3CBR%20%2F%3E%3CBR%20%2F%3EIf%20you%20want%20to%20be%20sure%20the%20configuration%20is%20applied%2C%20you%20can%20try%20to%20check%20reg%20value%20and%20configuration%20name%20in%20HKEY_LOCAL_MACHINE%5CSOFTWARE%5CMicrosoft%5CPolicyManager%5Ccurrent%5Cdevice%3C%2FLINGO-BODY%3E
New Contributor

Hi Intune Legends,

 

It would be a useful enhancement for Intune Configuration profiles to have a version number, and the endpoint device to pickup the configuration profile versioning.

 

I am trying to create Block and Allow policies for USB's. Short of creating a completely new configuration profile each time, its very difficult to confirm whether any configuration changes to an existing profile have pushed out to a test device.

 

If I could pull out some type of versioning information from the endpoint device picking up the configuration profile, it would make testing a much happier process. 

 

It would take the guesswork out of whether a change has not applied to a device yet or not worked.

1 Reply
best response confirmed by Ari_R420 (New Contributor)
Solution
Hi,

It's not a versionning like you want, but you can track configuration applied with eventvwr (DeviceManagement-Enterprise-Diagnostics-Provider) and/or registry.

Check this post :
https://www.anoopcnair.com/windows-10-intune-mdm-support-help-1/

If you want to be sure the configuration is applied, you can try to check reg value and configuration name in HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\current\device