Intune Vs. Local GPO - FIGHT

[Warwick_Tech]

Hi All,

 

So after another headache of a day, it seems the 'Setup Schools PC' app is applying some local GPO's -

 

As you may or may not be aware of local GPO overwrites Intune policies, so therefore Windows Hello has not been working in my tenant - Setup Schools PC's disables the GPO for whatever reason.

 

So, this leaves me with a tricky question - I could wipe the local GPOs from the Intune machines, giving full control to Intune

 

RD /S /Q "%WinDir%\System32\GroupPolicyUsers" && RD /S /Q "%WinDir%\System32\GroupPolicy"

 

but this arguably will keep applying, rendering local GPO's useless on these machines.

 

Throwing it out to the room, what do people think?

[DrCheese]

It's up to you - You can either remove the device from intune or set this policy to always allow intune policy to win

 

https://www.andersrodland.com/how-to-make-intune-mdm-policy-win-over-gpo/

 

You can't set GPO to always win over intune tho.