Chapter materials

Before moving on to configuring our policies, there are a couple of things to keep in mind.

Firstly, some settings can be configured in multiple places, especially when looking at security policies, so it is always worth keeping in mind what you are configuring and where to avoid making conflicting policies. Even if a setting has the same value in two different policies, it will be marked as a conflict within the GUI.

The other thing is the concept of tattooing. Some settings when applied can leave the setting configured on a device when switched to Not Configured within Intune. If there is a setting with the Enabled or Not Configured options, changing it to Not Configured does not send a signal to undo the configuration on the device; it simply tells Intune not to do anything with that particular setting and leave it to whatever happens to be set on the device already. Normally, this will just be the default Windows settings, but if it is a policy you have...