Removing User from Intune Configuration Profile

Anonymous
2023-03-22T17:00:15.2066667+00:00

Hi

  1. I have successfully set up a Intune Configuration Profile which "Prohibits Access to Control Panel & PC Settings" for All Standard Users, but excluding All Global Administrators.
  2. It works fine, too fine, as Users are constantly asking me to do something on there PC's in either setting or control Panel.
  3. I've tried to add one of the standard users, as an excluded member in the assignment section of the the configuration profile, in doing so I was hoping that it would disable the "Prohibits Access to Control Panel & PC Settings" and allow the specific User access to their Control Panel and Settings - this is not the case.
  4. Is this a case of Policy Tattooing? If so how do I remove it for the specific User?
  5. Just nudge me in the right direction and I'll do the rest.
Microsoft Intune Configuration
Microsoft Intune Configuration
Microsoft Intune: A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.Configuration: The process of arranging or setting up computer systems, hardware, or software.
1,781 questions
{count} votes

2 answers

Sort by: Most helpful
  1. Anonymous
    2023-03-22T17:57:51.0533333+00:00

    @Rahul Jindal [MVP]

    Final wrinkle once the revised policy has been deployed, can I tidy things up by removing the revised policy, or is it best practise to just leave it in situ?


  2. Crystal-MSFT 45,486 Reputation points Microsoft Vendor
    2023-03-23T01:24:57.7+00:00

    @Richard Berry, Thanks for posting in Q&A. On my point of view, you can let the policy there. If you want block the control panel and PC setting access for this user in the future, you can change the setting "Prohibits Access to Control Panel & PC Settings" from disabled to enable directly.

    Hope it can help.


    If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.