This guide will provide background information on creating a deployment profile that will push specified security settings to the specified device group during the Autopilot onboarding process.
Role Requirements
Procedure Scope: Administrators
Required Group Membership: Admin.Security
Handbook Reference
Package: TBD
Domain: TBD
Modifies: TBD
Creating a Device Configuration Profile
- Navigate to the Deployment Profiles – Intune portal, locate and select the + Create profile dropdown followed by selecting Windows PC.
- You will supply basic identification information such as the Name and Description for the profile. Select Next to proceed.
- All the security related configuration items within the scope of the profile type will be listed, configure these controls to meet your desired security needs for your organization. Select Next to continue.
- You will be able to configure Group Assignments or Exclusion for the policy. Locate and select the Add groups action. A pop-up will be displayed where you will supply the name of the group in the provided search bar, make sure to select the Group from the list. If done correctly they will be generated in the Selected Items section, finalize the addition by clicking Select. Select Next to proceed to revisions.
- The review page will allow you to see all configured settings for the profile type creation process, if you detect a discrepancy at this stage make note of the section and select Previous to go back to make the necessary alterations before finalization. If everything checks out, select Create to publish the rule.
- Upon successful creation the deployment profile will show up in the list of deployment profiles managed through Intune.
Need Assistance?
Reach out to your Customer Success Manager to discuss how a Sittadel cybersecurity analyst can assist in managing these tasks for you. New to our services? Inquire about arranging a consultation to explore optimizing your Azure environment for painless management.