Settings catalog

In the Ultra Transcenders books

MD-102

Each book explains Settings catalog in context, with comparison tables and the common traps.

Terms in this definition

• Intune

  Microsoft's device management service, once branded Microsoft Endpoint Manager. Its compliance policies are what the compliant-device grant in Conditional Access relies on.

• ALL

  A DAX function that ignores any filters and gives back every row of a table or every value of the named columns. Used within CALCULATE, it works as a modifier that clears filters, although REMOVEFILTERS states that intent more clearly where it is available.

• List

  Permission on Key Vault secrets allowing a caller to enumerate those in a vault, though their values are not returned.

Related terms

• Administrative Templates

  ADMX-based Group Policy settings. Intune lists the built-in ones among the settings catalog's entries; ADMX files that you bring yourself show up as Imported Administrative templates.

• ADMX

  Group Policy settings are defined in these XML files. The settings catalog in Intune already has many settings that depend on them, and you may import up to 20 of your own or third-party ones, at most 1 MB each and in en-us only, along with matching ADML files.

• Device configuration profile

  An Intune policy that pushes settings, such as Wi-Fi, VPN or device restrictions, to devices using either a template or the settings catalog.

• Device restrictions

  An Intune template for controlling features like app stores, passwords and the camera. Its Apple versions are no longer updated; Microsoft points admins to the settings catalog instead.

• FileVault

  Apple's whole-disk encryption for Macs. Intune manages it through the settings catalog or an endpoint security disk encryption profile, provided the Mac's MDM enrolment was user-approved.

• Group Policy analytics

  Takes backups of GPOs, works out which of their settings MDM supports through a CSP, and moves the supported ones into a settings catalog policy in Intune.

• Intelligent rollouts

  A Windows Autopatch choice for phased feature update deployments in which the first group to receive the update is a varied pilot. You enable it through the Allow WUfB Cloud Processing setting in the settings catalog.