MEM (Intune) Configuration Profiles

[techie17]

Hi

 

Im playing around with Microsoft Endpoint Manager in 365 and im having a look at setting up some profiles and i just want to know the best way of setting up the profiles. Should i separate user and device profiles, and is it better to bundle most settings into less profiles or have the settings separate eg: one policy for Onedrive folder redirection, one policy for control panel settings etc. Also is it good practice to have a naming policy for profiles?

 

Thanks

[KevinB]

I'm pretty new to Intune myself, but I'm finding that it's better to have separate Configuration Profiles for Users and for Devices, and to only bundle together settings that belong together so e.g Edge settings, Internet settings, Printing settings etc, pretty much the same as you would do for Group Policy on an on prem AD network.

[CHiLL]

Like our GP policies, we have separate policies for device configuration and user configuration. I also prefer having more individual policies that group similar aspects together (like @KevinB said), so printer settings in one, Internet settings in another, device restrictions in another, user restrictions in another, etc. And further split to differentiate between staff and students (for both user accounts and devices). This allows for less issues if you bork a policy, at least it doesn't bork all your settings.