Microsoft 365 Endpoint AdministratorManage devices and apps (55-60%)Hard

A Microsoft 365 Endpoint Administrator needs to configure a custom setting on Windows 11 devices that is not available in any of Intune's built-in configuration profiles or templates. The setting is documented as a Configuration Service Provider (CSP) URI. Which Intune profile type should be used for this purpose?

  1. AAdministrative Templates profile
  2. BEndpoint protection profile for Windows 10 and later
  3. CCustom profile for Windows 10 and later (OMA-URI)
  4. DDevice restrictions profile for Windows 10 and later
Show answer & explanation

Correct answer: C. Custom profile for Windows 10 and later (OMA-URI)

For custom settings not covered by built-in templates, and when the setting is defined by a Configuration Service Provider (CSP) URI, the 'Custom profile for Windows 10 and later' using OMA-URI (Open Mobile Alliance Uniform Resource Identifier) is the correct and most flexible option in Intune.

Why the other options are wrong

  • A. Administrative Templates profiles manage Group Policy settings and are different from direct CSP configuration via OMA-URI.
  • B. Endpoint protection profiles focus on security features like antivirus and firewall, not arbitrary custom CSP settings.
  • D. Device restrictions profiles offer a predefined set of restrictions, not custom CSP settings.

Intune Custom Profile (OMA-URI)

A Microsoft Intune configuration profile that allows administrators to deploy custom settings to devices using Open Mobile Alliance Uniform Resource Identifier (OMA-URI) paths, directly interfacing with Configuration Service Providers (CSPs).

  • Used for settings not exposed in Intune's built-in templates.
  • Requires knowledge of CSPs and their OMA-URI paths.
  • Provides granular control over device configurations.

Memory trick: Custom Options Make Administration Unique.

More Manage devices and apps (55-60%) questions