Creating ADMX backed Configuration policies
I am trying to figure out how to create an ADMX backed Config Profile in Intune to disable the weather and stock information that is now sent to the Windows 11 lock screen but I cannot get it to work. According to this post, I should use the WindowsLogon/DisableLockScreenAppNotifications CSP. This article describes the CSP configuration and as it is an ADMX backed policy, it requires SyncML format to configure. Between this article and this article, I created a custom Config Profile like below, Name: Disable App Notifications Description: Blank OMA-URI: ./Device/Vendor/MSFT/Policy/Config/WindowsLogon/DisableLockScreenAppNotifications Data Type: String Value: <SyncML xmlns="SYNCML:SYNCML1.2"> <SyncBody> <Replace> <CmdID>2</CmdID> <Item> <Meta> <Format>chr</Format> <Type>text/plain</Type> </Meta> <Target> <LocURI>./Device/Vendor/MSFT/Policy/Config/WindowsLogon/DisableLockScreenAppNotifications</LocURI> </Target> <Data><Enabled/></Data> </Item> </Replace> <Final/> </SyncBody> </SyncML> I've deployed it to my user account first and after it failed, I deployed it to my device where it also failed. The event log shows this error in both cases Can anyone please help tell me where I am going wrong? Thanks in advance
OneDrive Group Policy Template changes
I'm curious, about OneDrive Group Policy settings. Knowing that the ADMX Template files come down when the Sync Client is installed, if there a list of any updates to those ADMX Templates like Microsoft Office's templates have an Excel file that show changes, etc.? How often are those ADMX Templates updated? The IT Admins - Use OneDrive policies to control sync settings - SharePoint in Microsoft 365 | Microsoft Learn page doesn't list when there are updates made to the ADMX files. What's the recommended best practice for how often an Enterprise ADMX Central Store should be updated with the updated templates?
ADMX Syntax Questions
Is this the latest ADMX Syntax: Download Group Policy ADMX Syntax Reference Guide from Official Microsoft Download Center (It's from 2007.) Additionally, I'd like to configure a policy in this way: Enabled: Takes a string from a textbox Disabled: Sets a specific value Not Configured: Default GPO behavior (leave value as-is) The only way I've gotten it to work, without MMC complaining, is this but it doesn't work. Additionally, the changes don't take effect. Once the window is re-opened, it's back to "Not Configured". <policies> <policy name="Policy_OverwriteSettings" class="Machine" displayName="$(string.Policy_OverwriteSettings)" explainText="$(string.Explain_OverwriteSettings)" presentation="$(presentation.presentation_OverwriteSettings)" key="SOFTWARE\Policies\Example" valueName="mydword"> <parentCategory ref="abc:Category" /> <supportedOn ref="SUPPORTED_Platform_Since" /> <disabledValue> <string>3</string> </disabledValue> <elements> <text id="policy_OverwriteSettingsValue" key="SOFTWARE\Policies\Example" valueName="mydword" required="true" /> </elements> </policy> </policies>
Updating ADMX Templates in InTune
Hi There, There currently doesn't appear to be a way to update ADMX templates, so I am wondering what the correct process is if you want to update the ADMX template to the latest version, currently the only way is the delete the ADMX template and re-upload, but what will happen to the existing policies if they use that ADMX template? Will the policies be deleted too? Also what happens if you delete and re-upload an ADMX template that is a dependency for another ADMX template? Just want to know what the best practice is here and what will happen if I delete and update an existing template.Chrome Policies - ADMX Ingestion and OMA-URI Values | NotificationsAllowedForUrls
Hi. Has Someone succeeded to apply NotificationsAllowedForUrls policies using OMA-URI values? I have set all stuff for ADMX Ingestion for Chrome, using official doc. All other settings are working as expected, just this specific one i'm getting error: Name: NotificationsAllowedForUrls OMA-URI: ./Device/Vendor/MSFT/Policy/Config/Chrome~Policy~googlechrome~ContentSettings/NotificationsAllowedForUrls Value: <enabled/><data id="NotificationsAllowedForUrls" value="1[*.]workplace.com2[*.]office.com"/> Oliver Kieselbach you who are such guru on OMA-URI stuff... did you saw something like this?
Request: "Offline" Keep Favorite in Sync IE11 <-> Edge (Chromium)
The 'Legacy' MS Edge had a Group Policy that allowed an "offline" browser favorite Sync on a local system between IE and Edge: Windows Components/Microsoft Edge "Keep favorites in sync between Internet Explorer and Microsoft Edge" For Enterprises that aren't leveraging O365 and account Sync (or for whatever reason can't) this would make for a smooth sailing scenario. Any possibility for implementation?"SmartScreenPuaEnabled" Reporting 'Error' on 'Policy Status' of "Unknown Policy"
Enabling the "SmartScreenPuaEnabled" policy is giving an error when deployed Anyone else seeing this error when enabling the policy on 79.0.309.40 (Official build) beta (64-bit)? (Current Release Target for Enterprise) https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-policies#smartscreenpuaenabled
