In Microsoft Intune there is some new settings for configure Windows Settings app this feature is added in Windows 10, version 1703. Allows IT Admins to either prevent specific pages in the System Settings app from being visible or accessible.
This profile settings was first introduced in Intune 1704 – and in the new Intune 1706 with a more settings and sub settings.
- Settings app
- System
- Power and sleep settings modification (desktop only)
- Devices
- Network and Internet
- Personalization
- Apps
- Accounts
- Time and Language
- Region settings modification (desktop only)
- Language settings modification (desktop only)
- Gaming
- Ease of Access
- Privacy
- Update and Security
Pro: Yes
Business: Yes
Enterprise: Yes
Education: Yes
Mobile: Yes
Mobile Enterprise: Yes
IoT Core: No
Can be set using Exchange Active Sync (EAS): No
How to create a Device Configuration profile to configure the settings app.
Login to Intune in Azure : https://portal.azure.com
Go to Intune –
Click on Profiles
Create profile
Give the profile a Name
Select Platform – Windows 10 and Later
Profile Type – Device Restriction
Settings Configure – Control Panel and Settings
Block everything except Settings app and Accounts
Assign the profil to a group of users or devices
When the device is sync with Intune at the next schedule the profile will take effect,
And the user can only see the Account tab in settings app
When clicking Accounts the user get access to the Account tab and have access to everything except Access Work or School
Here is another example where only Accounts and Update & security is enabled
Then the user experience is like this
You need to test and try combination in the profile settings so you get the result you what for your users.
Cloud First 