Microsoft 365 Endpoint AdministratorManage devices and apps (55-60%)Medium

A Microsoft 365 Endpoint Administrator needs to deploy a custom configuration to a specific registry key on all corporate-owned Windows 11 devices. This setting is not directly available through standard Intune device configuration profiles or ADMX templates. The administrator has the OMA-URI string and the desired value for the setting. Which Intune policy type should be used?

  1. ASecurity baseline
  2. BAdministrative templates
  3. CSettings catalog
  4. DCustom configuration profile (Windows 10 and later)
Show answer & explanation

Correct answer: D. Custom configuration profile (Windows 10 and later)

When a specific setting is not exposed through standard Intune profiles or ADMX templates, a 'Custom configuration profile' using OMA-URI (Open Mobile Alliance Uniform Resource Identifier) is the correct method. This allows direct configuration of CSP (Configuration Service Provider) settings, including registry values, on Windows devices.

Why the other options are wrong

  • A. Security baselines are pre-configured sets of security settings, not for deploying custom, non-standard registry keys or OMA-URI configurations.
  • B. Administrative templates are based on ADMX files and apply only to settings defined within those templates, not arbitrary OMA-URI strings.
  • C. Settings catalog provides a comprehensive list of configurable settings, but if a specific OMA-URI is known and not in the catalog, this is not the direct method.

Intune Custom OMA-URI Profile

An Intune device configuration profile that allows administrators to deploy custom settings to Windows devices using Open Mobile Alliance Uniform Resource Identifier (OMA-URI) strings, directly interacting with Configuration Service Providers (CSPs).

  • Used for settings not available in standard profiles
  • Requires OMA-URI string, data type, and value
  • Directly configures CSPs on Windows devices
  • Can be used to modify registry keys via CSPs

Memory trick: Custom Keys Need Open Paths, OMA-URI Knows the Maths.

More Manage devices and apps (55-60%) questions