SOLVED

Can I use Intune Policy like group policy

%3CLINGO-SUB%20id%3D%22lingo-sub-720456%22%20slang%3D%22en-US%22%3ECan%20I%20use%20Intune%20Policy%20like%20group%20policy%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-720456%22%20slang%3D%22en-US%22%3E%3CP%3EHello%2C%3C%2FP%3E%3CP%3Ecan%20I%20push%20policies%20to%20windows%2010%20devices%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ELike%20I%20create%20a%20policy%20with%20Firewall%20restricted.%20Now%20I%20like%20to%20push%20the%20policy%20to%20the%20devices.%20So%20when%20on%20a%20device%20the%20Firewall%20is%20manualy%20turned%20of%20it%20will%20automaticaly%20turened%20the%20Firewall%20on%20(through%20the%20policy).%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20want%20to%20use%20Inune%20policy%20like%20a%20AD%20group%20policy.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Ethanks%20for%20your%20help%3C%2FP%3E%3CP%3EStefan%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-720456%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EIntune%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EMobile%20Device%20Management%20(MDM)%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-725346%22%20slang%3D%22en-US%22%3ERe%3A%20Can%20I%20use%20Intune%20Policy%20like%20group%20policy%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-725346%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F364308%22%20target%3D%22_blank%22%3E%40jenstf%3C%2FA%3E%26nbsp%3B%20I%20am%20failing%20to%20follow%20just%20a%20little.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EMy%20understanding%20is%20the%20Configuration%20policy%20push%20the%20configuration%20down%20to%20the%20machine%20and%20make%20the%20changes%20(Enforce%20the%20config).%20Then%20the%20Compliance%20policy%20would%20provide%20the%20alerting%20to%20let%20the%20admins%2Fsystem%20know%20if%20the%20configuration%20was%20successful%20(Report).%20Followed%20by%20the%20Conditional%20access%20that%20takes%20Action%20based%20on%20what%20the%20Compliance%20policy%20reported%20(Allow%2FBlock)%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-721499%22%20slang%3D%22en-US%22%3ERe%3A%20Can%20I%20use%20Intune%20Policy%20like%20group%20policy%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-721499%22%20slang%3D%22en-US%22%3E%3CP%3EYou%20can%20assign%20configuration%20policies%20with%20device%20settings%20to%20a%20group%20of%20devices.%3C%2FP%3E%3CP%3EWith%20custom%20(CSP)%20rules%20you%20could%20even%20trigger%20settings%20based%20on%20variables%20like%20network%20location.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
Regular Contributor

Hello,

can I push policies to windows 10 devices?

 

Like I create a policy with Firewall restricted. Now I like to push the policy to the devices. So when on a device the Firewall is manualy turned of it will automaticaly turened the Firewall on (through the policy).

 

I want to use Inune policy like a AD group policy.

 

thanks for your help

Stefan

 

 

2 Replies
Highlighted

You can assign configuration policies with device settings to a group of devices.

With custom (CSP) rules you could even trigger settings based on variables like network location.

 

 

Highlighted
Best Response confirmed by Stefan Kießig (Regular Contributor)
Solution

@jenstf  I am failing to follow just a little.

 

My understanding is the Configuration policy push the configuration down to the machine and make the changes (Enforce the config). Then the Compliance policy would provide the alerting to let the admins/system know if the configuration was successful (Report). Followed by the Conditional access that takes Action based on what the Compliance policy reported (Allow/Block)?