This blogpost is a rewrite after Microsoft released the July update of Intune, this feature is native in the Windows 10 Endpoint Protection profile. See my original blogpost here.
For every Windows 10 build Microsoft has released we are getting more and more MDM settings available in the operation system next version is no exception. In this blog post I will show how to disable the Xbox services with Intune. The new CSP – SystemService will apply to Windows 10 1803.
The System Service CSP allows us to configure the startup mode for the following services on Windows:
- Home Group Listener Service
- Home Group Provider Service
- Xbox Accessory Management Service
- Xbox Live Auth Manager Service
- Xbox Live Game Save Service
- Xbox Live Networking Service
It only applies to this version of Windows 10:
Create the profile in Intune:
- Name: Windows 10 – Endpoint Protection – System Services Xbox
- Platform: Windows 10 and later
- Profile type: Endpoint Protection
- Settings: Select Configure
- Xbox services: Click
- Xbox services:
- Xbox Accessory Management Service : Disabled
Xbox Live Auth Manager Service : Disabled
Xbox Live Game Save Service : Disabled
Xbox Live Networking Service : Disabled
- Xbox Accessory Management Service : Disabled
How does this looks like from the client side:
In the Windows 10 MDM Advanced Diagnostic Report we can see the default value before the new created profile applies to the devices
After the profile are successfully assigned to the device we can see the Xbox services is set to Disabled
In the Windows 10 MDM Advanced Diagnostic Report we can see the settings from the profile applies to the devices
At this moment the value set on the devices is now showed correctly in the Advanced Diagnostic Report
When the Xbox service is disabled the end user cannot sign in to the Xbox service
Read more at:
Cloud First 