Table 3-5 describes the available profile types. It’s important to note that not all profile types are supported by every operating system.
TABLE 3-5 Commonly used Intune device-configuration profiles
| Profile | Description |
| Manages Exchange ActiveSync settings on devices. | |
| Device restrictions | Prevent device usage, such as disabling the built-in camera, connecting to Bluetooth devices, or using cellular data. |
| Wi-Fi | Allows you to manage wireless network settings for users and devices. In Windows 11, managing settings for users allows them to connect to corporate Wi-Fi without having to configure the connection manually. Instead, users can import a configuration previously exported from another device. |
| Administrative templates | Allows you to manage hundreds of settings for Microsoft Edge, OneDrive, Remote Desktop, Word, Excel, and other Microsoft Office programs for Windows 11 devices. Administrative templates provide a simplified view of settings similar to Group Policy for Windows 11. |
| Kiosk | Allows you to configure a device to run one or multiple apps, such as a web browser. This feature supports Windows 11, and kiosk settings are also available as device restrictions for Android, Android Enterprise, and iOS devices. |
| VPN | Configures VPN settings for devices. This feature supports: AndroidAndroid EnterpriseiOSmacOSWindows 8.1Windows 10 and later |
| Education | Configures options for the Take a Test app in Windows 11. iOS uses the iOS Classroom app. |
| Certificates | Allows you to configure trust and other certificates used for Wi-Fi, VPN, and email profiles. |
| Edition upgrade | Allows you to permit users to upgrade some versions of Windows 11. |
| Endpoint protection | Configures settings for BitLocker and Windows Defender. |
| Custom profile | Custom settings allow administrators to assign device settings not built into Intune. These use the Open Mobile Alliance Uniform Resource Identifier (OMA-URI) values for Android and Windows devices. For iOS devices, you can import a configuration file you created in the Apple Configurator or Apple Profile Manager. |
Profile Types Common Across Platforms
A number of profile types are available across all platforms. These are:
- Device restrictions
- PKCS certificate
- PKCS imported certificate
- SCEP certificate
- Trusted certificate
- VPN
- Wi-Fi
Device profiles available for Windows
Perhaps unsurprisingly, the support for Windows client configuration is very extensive. The available Windows profile types are shown below:
- Administrative templates
- Custom
- Delivery optimization
- Device firmware configuration interface
- Device restrictions
- Device restrictions (Windows 10 Team)
- Domain join
- Edition upgrade and mode switch
- Endpoint protection
- Identity protection
- Imported Administrative templates (Preview)
- Kiosk
- Microsoft Defender for Endpoint (Desktop devices running Windows 10 or later)
- Network boundary
- PKCS certificate
- PKCS imported certificate
- SCEP certificate
- Trusted certificate
- Secure assessment (Education)
- Shared multi-user device
- VPN
- Wi-Fi
- Windows health monitoring
- Wired network
