Deploy Intune Policy
Overview
Settings Catalog is the modern way to deploy configuration policies. Microsoft is deprecating Templates in favour of Settings Catalog.
Create a Settings Catalog Policy
Step 1: Navigate
Intune → Devices → Configuration → + Create → New Policy
Step 2: Platform and Profile Type
- Platform: Windows 10 and later
- Profile type: Settings catalog
- Click Create
Step 3: Basics
- Name: Descriptive name (e.g.,
BCM-Desktop-Wallpaper) - Description: What this policy does
- Click Next
Step 4: Configuration Settings
- Click + Add settings
- Use the search box to find settings
- Tick the settings you want
- Click X to close the picker
- Configure each setting's value
- Click Next
Step 5: Scope Tags
Skip unless you use scope tags. Click Next
Step 6: Assignments
- Click + Add groups or + Add all devices
- Select target group (e.g., All Devices, Cloud Devices)
- Click Next
Step 7: Review + Create
Review settings, click Create
Common Settings Locations
| Setting | Search Term | Category |
|---|---|---|
| Desktop wallpaper | Desktop Image |
Personalization |
| Lock screen image | Lock Screen Image |
Personalization |
| Block wallpaper change | Prevent changing desktop |
Admin Templates > Control Panel |
| Block registry editor | registry editing tools |
Admin Templates > System |
| Block Windows tips | tips |
Admin Templates > Cloud Content |
| Block consumer features | consumer |
Experience |
| Block Windows Spotlight | spotlight |
Experience |
Settings Catalog vs Admin Templates
| Settings Catalog | Admin Templates |
|---|---|
| Modern, Microsoft preferred | Legacy GPO settings |
| Granular selection | Pre-bundled categories |
| Growing feature set | Complete GPO coverage |
Use Settings Catalog for new policies. Fall back to Admin Templates only if setting doesn't exist in Catalog.
Check Policy Status
- Go to Devices → Configuration → Policies
- Click your policy
- Check Device and user check-in status
- Click Device assignment status for per-device breakdown
Force Device to Sync
On device: Settings → Accounts → Access work or school → Click account → Info → Sync
From Intune: Devices → [Device] → Sync (top toolbar)
Troubleshooting
Policy shows errors:
- Check the specific error code
- Common: URL not accessible, setting conflict with another policy
Policy not applying:
- Check Assignments tab
- Verify device is in the assigned group
- Force sync and wait 15-30 minutes
Setting not available:
- Try different search terms
- May need PowerShell script instead
#bcm/procedure/intune/policy