Windows Modern Desktop Profile Configurations

Add configurations to profiles to push settings to devices. The tables below show the configurations available for this platform.

Important: Azure AD devices that support many user accounts update user information whenever the device checks in. If you push a profile configuration for a user rather than a device, the profile is only pushed when it detects that the user is active on the device.

Security

Configuration Description
Authentication Enforces administrator and user password policies.
BitLocker Configures BitLocker encryption of Windows Modern devices.
Certificates: Client PFX Distributes Client PFX certificates to your devices.
Certificates: Root Distributes Root certificates to your devices.
SCEP Configures devices to obtain certificates from a SCEP server.
Windows Defender Configures antivirus settings for your Windows Modern device.
Windows Updates Manages Windows Modern updates such as firmware updates and security patches.

Restrictions

Configuration Description
Application Run Control Restricts applications that can operate on your devices.
Edge Browser Configure Edge browser properties on Windows Modern devices
Feature Control Disables specific device features such as camera, Bluetooth, and others.
Firewall Configures advanced firewall policies to filter or reroute network traffic.
Note: This functionality is not supported for AMAPI-enrolled devices.
Multi-App Kiosk Mode Configures custom multi-app kiosk display settings for your devices.
Single-App Kiosk Mode Configures custom single-app kiosk display settings for your devices.
Lockdown | Using the Configuration Configures custom kiosk display settings for your devices.
Web Content Filter Specifies a content filtering service to restrict and manage user website access.
Windows Information Protection Use the Windows Information Protection (WIP) profile configuration to manage access to corporate data on your devices.

Connectivity

Configuration Description
APN Configures Access Point Name (APN) settings for your devices.
Restriction: This functionality is not supported for AMAPI-enrolled devices.
Modern VPN: VPN Native Profile Configures VPN account settings for your devices using the Native profile.
Modern VPN: VPN Plugin Profile Configures VPN account settings for your devices using the Plugin profile.
SOTI VPN | Configuration Details Configures SOTI VPN service settings.
Wi-Fi Configures Wi-Fi settings on your devices.

Email, Contacts, & Calendars

Configuration Description
Email: Exchange for Gmail: Exchange Active Sync Configures Exchange Active Sync email account settings for your devices.
Email: Exchange for Gmail: IMAP Configures IMAP email account settings for your devices.
Email: Exchange for Gmail: POP3 Configures POP3 email account settings for your devices.
Local Users (Windows Modern) Adds Local users to your devices.
Reboot Configures restart schedule for your devices.
Task Scheduler Configures schedules for executing device scripts.