Forum Discussion
Configuration Profile settings continue to be applied to Device after its removed from Configuration
I created a very simple test Configuration Profile in Intune for Windows devices. Its a settings catalog configuration to Reboot the device daily at a specified Time.
I had a test machine in the AAD group that this Config Profile was assigned to and everything worked fine. Computer rebooted at the time I had specified every day. I then removed the AAD Group from the assigned Groups in the Daily Reboot profile. My assumption was that this configuration would be removed from the device. The test machine continues to reboot every day at the same time even after removing the AAD group from the Config Profile.
When I look at the Device Config for this particular machine, the Daily Reboot profile is not listed as being applied to the device.
I looked in Task Scheduler on the machine itself to see if some kind of Task was created but could not find anything related to a daily reboot.
Any suggestions on where I can find this configuration on the Device itself and the best way to remove it?
Is this common behavior for Intune?
- Did you read my response on reverting settings? Also, you should be able to delete a schedule by setting a null value against the CSP. Should be possible to achieve the same using settings catalog. https://learn.microsoft.com/en-us/windows/client-management/mdm/reboot-csp
- Removing an assignment will not revert the managed settings. This is only supported for limited number of CSPs. If you want to get rid of the reboot task then you will need to apply a policy from Intune in some shape or form.
- Can we see the policy that you created to begin with?
Initial Test Config:
Device Configuration Profile Settings Catalog for Windows 10 Devices
Assigned to one AAD Group - Daily Reboot Test
- This group had one device in it, a test laptop I use
The only settings Configuration was
- Reboot - Daily Recurrent - Set at 3pm CST
I monitored this on the test device for several days and every day at 3pm, the laptop would reboot. I decided to roll this out to a group of reception desktops to try it out and then made some slight changes to the Policy
Production Policy:
Removed Daily Reboot Test AAD Group from the configuration assignment
Assigned a different group - Daily Reboot Front Desk - to the policy
- This group contains 5 different devices, not my test device
Changed the Reboot Daily Recurrence time to 1:00am CST
This is the only setting configured in this Policy.
Monitored the devices in this new group and confirmed by checking their local Event Viewer that they did in fact reboot at 1:00am CST.
But - the initial test laptop that was configured to reboot daily at 3pm continues to reboot daily at 3pm.
Wondering if there are any suggestions how to remove the reboot configuration on the test machine?Also, where locally on the test laptop can I view this configuration? Tried looking in PolicyManager in the registry but didn't see anything.
- Did you read my response on reverting settings? Also, you should be able to delete a schedule by setting a null value against the CSP. Should be possible to achieve the same using settings catalog. https://learn.microsoft.com/en-us/windows/client-management/mdm/reboot-csp
