Skip to Content
DevicesConfigurationAdministrative Templates

Administrative Templates

Access all available device settings in a searchable catalog through Microsoft Intune. The Settings Catalog provides the modern approach for granular device configuration with thousands of individual settings for Windows and macOS.

Note: Settings Catalog is the recommended approach for new policies. It provides access to more settings, better conflict detection, and a searchable interface with 5000+ Windows and 400+ macOS settings.

Overview

  • 5,000+ Windows Settings
  • 400+ macOS Settings
  • 156 Active Profiles
  • 89 Categories

Setting Categories

Windows Categories

  • Authentication — 245 settings
  • Browser (Edge) — 456 settings
  • Device Lock — 89 settings
  • Network — 312 settings
  • Security — 567 settings
  • Update — 134 settings
  • User Experience — 198 settings

macOS Categories

  • Accounts — 34 settings
  • App Management — 67 settings
  • Login — 45 settings
  • Network — 89 settings
  • Privacy — 56 settings
  • Restrictions — 78 settings
  • Security — 43 settings

Creating a Profile

  1. Profile Name — Give the profile a descriptive name
  2. Platform — Select Windows or macOS
  3. Settings Picker — Search and browse available settings
  4. Configure Values — Set each selected setting to desired value

Example Settings:

  • Allow Telemetry: Basic
  • Browser Sign-in: Force
  • Windows Spotlight: Disabled

Security

  • Credential Guard configuration
  • BitLocker drive encryption
  • Windows Defender SmartScreen
  • User Account Control behavior

User Experience

  • Start menu layout customization
  • Taskbar configuration
  • Desktop wallpaper policy
  • Lock screen settings

Edge Browser

  • Default search engine
  • Homepage settings
  • Extension allow/block lists
  • Password manager controls

Network

  • Proxy configuration
  • DNS settings
  • Wi-Fi sense
  • Hotspot 2.0

Settings Catalog vs Templates

FeatureSettings CatalogTemplates
Setting count5,000+ (Windows)Limited per template
SearchFull-text searchBrowse by category
Conflict detectionBuilt-inManual review
New settingsAdded continuouslyTemplate updates
ReportingPer-setting statusPer-profile status

Profile Deployment

Assign profiles to groups using include and exclude targeting:

  • Include Groups — Device or user groups that receive the profile
  • Exclude Groups — Groups excluded from the assignment
  • Filters — Further refine targeting by device properties (OS version, manufacturer, ownership)

Profile Status

  • 4,567 Succeeded
  • 23 Error
  • 45 Conflict
  • 12 Not Applicable

API Reference

  • GET /api/devices/settings-catalog/profiles — List Settings Catalog profiles
  • POST /api/devices/settings-catalog/profiles — Create profile
  • GET /api/devices/settings-catalog/settings — Search available settings
  • GET /api/devices/settings-catalog/profiles/:id/status — Get deployment status
  • GET /api/devices/settings-catalog/categories — List setting categories
Last updated on
Win32 AppsBitLocker Encryption