Intune User Policies not applying or applying..

[petben]

I am experiencing what is apparently quite common - user applied policies in Intune not applying, or applying when not wanted (to users who are explicitly excluded from the policy). I have read some other posts which recommend to use device based policies only, as user polices are inherently erratic. This is fine, but what about policies like 'Prevent access to settings menus' or 'Prevent access to Powershell/Command' that you want to block for students, but allow for admins. Staff and students also have a different Edge homepage for example.

 

Intune is OK, but IMO not fit for education (yet).

[MYK-IT]

Yes, we experienced similar when we intended to move fully over to Intune Policies instead of GPO (few years back) and realised (after weeks of testing) that Intune Policies are not instant or as granular as GPO (e.g. merge Device and User hierarchy etc). Resulting in us using a combination of staff & student specific build computers, GPO for settings that we wanted to apply instantly (and based on user type) and Intune for everything else. (e.g. device policies & settings, Windows updates, software deployment etc).

 

Essentially, user role-specific devices, and more so 1:1 devices allow Intune / Policies to work (much) better!

[DavR]

InTune really is designed for a 1-to-1 device world, with the intervals between policies applying hours, rather than the minutes we're used to in GP, and not taking into account the different levels of restrictions when users log on and off. It also seems to assume a fairly light touch approach to restrictions, rather than the full lockdown that we're used to doing with children.

 

We've got a bank of loan devices which I want to manage with InTune, but these don't have an owner, until they're loaned out. I still haven't got my head around how I'm going to manage that one!