Windows Modern Desktop Profile Configurations

Add configurations to profiles to push settings to devices. Use the tables below to see the configurations available for this platform.

Important: Azure AD devices that support many user accounts update user information whenever the device checks in. If you push a profile configuration for a user rather than a device, the profile is only pushed when it detects the user is active on the device.

Security

Configuration Description
Authentication Enforces administrator and user password policies.
BitLocker Configures BitLocker encryption of Windows Modern devices.
Certificates: Client PFX Distributes Client PFX certificates to your devices.
Certificates: Root Distributes Root certificates to your devices.
SCEP Configures devices to obtain certificates from a SCEP server.
Windows Updates Manages Windows Modern rollouts such as firmware updates and security patches.

Restrictions

Configuration Description
Application Run Control Restricts which applications can operate on your devices.
Single-App Kiosk Mode Configures custom single-app kiosk display settings for your devices.
Multi-App Kiosk Mode Configures custom multi-app kiosk display settings for your devices.
Feature Control Disables specific device features such as camera, Bluetooth, and others.
Firewall: Firewall Rule Configures the Microsoft Defender Firewall Rules for your devices.
Firewall: Firewall Settings Configures the Microsoft Defender Firewall Settings for your devices.
Lockdown Configures custom kiosk display settings for your devices.

Email, Contacts, & Calendars

Configuration Description
Email: Exchange Active Sync Configures Exchange Active Sync email account settings for your devices.
Email: IMAP Configures IMAP email account settings for your devices.
Email: POP3 Configures POP3 email account settings for your devices.

Connectivity

Configuration Description
APN Configures Access Point Name (APN) settings for your devices.
Important: This configuration is deprecated as of iOS 16. To push APN settings for iOS 16+ devices, add a Cellular configuration.
Modern VPN: VPN Native Profile Configures VPN account settings for your devices using the Native profile.
Modern VPN: VPN Plugin Profile Configures VPN account settings for your devices using the Plugin profile.
WiFi Configures WiFi settings on your devices.