ADMX Ingestion help

Brian Hoyt 156 Reputation points
2020-07-20T19:53:48.75+00:00

I am trying to do some ADMX Ingestion for the first time and I am hoping someone can help verify my process. From my understand reading many docs pages and blog posts this is what I have come up with. I am basing this all on Biometrics.admx available in standard windows install.

First, there needs to a Custom policy that contains the policy definition. It has in it:
OMA-URI - ./Device/Vendor/MSFT/Policy/ConfigOperations/ADMXInstall/Biometrics/Policy/Biometricsadmx
Data Type - String
Value - Full contents of Biometrics.admx

Second, there needs to be a Custom policy that contains the actual settings you want to apply. I am trying to recreate this GPO:
13101-image.png

I have created three settings:

  1. OMA-URI - ./Device/Vendor/MSFT/Policy/Config/Biometrics~Policy~BiometricsConfiguration/Biometrics_EnableBio
    Data Type - String
    Value - <enabled/>
  2. OMA-URI - ./Device/Vendor/MSFT/Policy/Config/Biometrics~Policy~BiometricsConfiguration/Biometrics_EnableCredProv
    Data Type - String
    Value - <enabled/>
  3. OMA-URI - ./Device/Vendor/MSFT/Policy/Config/Biometrics~Policy~BiometricsConfiguration/Biometrics_EnableDomainCredProv
    Data Type - String
    Value - <enabled/>

Any help verifying my settings is appreciated. The construction of the OMA-URI string isn't obvious to me. The value I am not sure to put enabled or just 1. Thanks.

Brian Hoyt
Dir of IT
French American School of Puget Sound

Microsoft Intune Configuration
Microsoft Intune Configuration
Microsoft Intune: A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.Configuration: The process of arranging or setting up computer systems, hardware, or software.
1,737 questions
Microsoft Intune Enrollment
Microsoft Intune Enrollment
Microsoft Intune: A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.Enrollment: The process of requesting, receiving, and installing a certificate.
1,263 questions
Microsoft Intune
Microsoft Intune
A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.
4,421 questions
Accepted answer
  1. sascha stumpler 76 Reputation points
    2020-07-21T09:11:15.96+00:00

    Hi Brian,

    I know it is difficult to verify if your OMA-URI settings are correct. What helped me a lot was the fact that the ingested ADMX is stored in the registry of a device where it is deployed to in:

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\AdmxDefault

    And I copied the registry paths of the settings and used them in the OMA-URI after

    ./Device/Vendor/MSFT/Policy/Config/

    (Change \ to /)

    13115-image.png

    ./Device/Vendor/MSFT/Policy/Config/microsoft_edge~Policy~microsoft_edge_recommended/AutofillAddressEnabled_recommended

    I hope that helps

    Sascha

1 additional answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. CiciWu-MSFT 1,201 Reputation points
    2020-07-21T03:48:54.273+00:00

    Here is the approximate process:
    Step 1 - Download the ADMX files
    Step 2 - Create the OMA-URI custom policy
    Step 3 - Assign the policy to users

    Here is the detailed guide, just for your reference and hope it helpful.
    https://techcommunity.microsoft.com/t5/intune-customer-success/support-tip-ingesting-office-admx-backed-policies-using/ba-p/354824