Intune Configuration Profile Remove

dj56 31

If I have a configuration profile with some administrative template settings set and assigned to a group. To remove those settings would I just move that group to the Excluded group? Or would I need to modify the settings in that config profile and then keep that group in the Included groups? Or would just removing the groups from that configuration profile set all of those settings back to their defaults?

2 answers

Rahul Jindal [MVP] 10,521 Reputation points MVP

2022-01-07T20:55:10.063+00:00

If your exclude a group or remove the assignment, Intune doesn't remove the settings configured earlier by the polices. They stay on. To remove the settings, you will have to create another set of policy with desired configuration(revert in your case) and deploy that to the intended group of devices\users. The same group should either be added to the exclusions of existing policy containing the settings that you want to remove or the assignment itself will need to be removed. This is needed to avoid conflicts.
Please sign in to rate this answer.

1 person found this answer helpful.
dj56 31 Reputation points

2022-01-07T21:45:58.003+00:00

The Configuration profile is an "Administrative Templates" one. So if I had those set to enabled, would it be best to set those to Not Configured or Disabled on the new one that I create?

Rahul Jindal [MVP] 10,521 Reputation points MVP

2022-01-08T00:12:53.317+00:00

That will depend on what configuration you want. If you want to disable the setting then select that. If you want to leave it Not configured then select that. Either way the setting will change. Just take care of the conflicts and apply necessary exclusions.

Lu Dai-MSFT 28,441 Reputation points

2022-01-10T02:41:19.07+00:00

@dj56 Thanks for posting in our Q&A and thanks RahulJindal for the valuable input.

For intune Configuration Profile Remove issue, whether the setting keeps the existing value or revert back to a default value, it depends on its CSP.

If we want to change a setting to a different value, it is suggested to create a new profile. For more detailed information, please refer to the following article:
https://learn.microsoft.com/en-us/mem/intune/configuration/device-profile-assign

Hope it will help.

Lu Dai-MSFT 28,441 Reputation points

2022-01-12T04:42:50.8+00:00

@dj56 I am checking this thread, if you have a chance to review this thread, please check if the answer is helpful. If it is helpful, please accept the answer. It will make someone else who has the similar confusion easily find the direction.

Thanks for your kindness in advance.

Victoria Aulicino_SA 0 Reputation points

2023-12-13T22:34:31.2966667+00:00

How would this work for trying to remove a custom profile from a MacOS device?

İbrahim Erkayalı 0 Reputation points

2025-01-09T14:42:40.02+00:00

What if I deleted the configuration policy before read this article? How can I remove this conf from client computers?
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.
Brownmattc 6 Reputation points

2022-11-08T21:38:25.26+00:00

Windows devices: After you remove or unassign the profile, have the Azure AD user sign in to the device, and sync with the Intune service.

Intune settings are based on the Windows configuration service provider (CSPs). The behavior depends on the CSP. Some CSPs remove the setting, and some CSPs keep the setting, also called tattooing.

Source: https://learn.microsoft.com/en-us/mem/intune/configuration/device-profile-troubleshoot
Please sign in to rate this answer.
Victoria Aulicino_SA 0 Reputation points

2023-12-13T22:34:23.0966667+00:00

How would this work for trying to remove a custom profile from a MacOS device?
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

Intune Configuration Profile Remove

2 answers

Your answer