Configurations policy mapping from Basic Mobility and Security to Intune

This article provides mapping details between Basic Mobility and Security to Intune. Specifically, this page maps Office 365 Security and Compliance portal Configurations policies to the equivalent policies in Microsoft Endpoint Manager admin center. Because Intune offers more flexibility, each Office policy will translate into multiple Intune and Azure Active Directory (Azure AD) policies to achieve the same result.

If you’re migrating from Basic Mobility and Security to Intune, you can use the Migration evaluation tool to automate much of this mapping.

To see these settings in the Office 365 Security and Compliance portal, sign in to the portal and then select Device security policies > policy name > Edit policy > Configurations.

Require encrypted backup

This setting was never supported for Windows or Android in Basic Mobility and Security.

One configuration profile:

• Devices > iOS/iPadOS > Configuration profiles > profile name > Properties > Compliance settings Edit > Cloud and Storage > Force encrypted backup

Block cloud backup

This setting was never supported for Windows or Android in Basic Mobility and Security.

This setting is only supported on supervices iOS devices.

One configuration profile:

• Devices > iOS/iPadOS > Configuration profiles > profile name > Properties > Configuration settings Edit > Cloud and Storage > various Block iCloud settings

Block document synchronization

This setting was never supported for Windows or Android in Basic Mobility and Security.

This setting is only supported on supervices iOS devices.

One configuration profile:

• Devices > iOS/iPadOS > Configuration profiles > profile name > Properties > Configuration settings Edit > Cloud and Storage > Block iCloud document and data sync

Block photo synchronization

This setting was never supported for Windows or Android in Basic Mobility and Security.

One configuration profile:

• Devices > iOS/iPadOS > Configuration profiles > profile name > Properties > Configuration settings Edit > Cloud and Storage > Block My Photo Stream

Block screen capture

For Android devices, this setting is only supported on Samsung Knox devices in Basic Mobility and Security.

Three configuration profiles:

• Devices > Windows > Configuration profiles > profile name > Properties > Configuration settings Edit > General > Screen capture (mobile only)
• Devices > iOS/iPadOS > Configuration profiles > profile name > Properties > Configuration settings Edit > General > Block screenshots and screen recording
• Devices > Android > Configuration profiles > profile name > Properties > Configuration settings Edit > General > Screen capture (Samsung KNOX only)

Block video conferences on device

This setting was never supported for Windows or Android in Basic Mobility and Security.

This setting is only supported on supervised iOS devices.

One configuration profile:

• Devices > iOS/iPadOS > Configuration profiles > profile name > Properties > Configuration settings Edit > Built-in Apps > Block FaceTime

Block sending diagnostic data from device

For Android devices, this setting is only supported on Samsung Knox devices in Basic Mobility and Security.

For Windows 10 devices, the most restrictive value prevents sending security-related data.

Three configuration profiles:

• Devices > Windows > Configuration profiles > profile name > Properties > Configuration settings Edit > Reporting and Telemetry > Share usage data

  Block sending diagnostic data from device value	Share usage data value
  Selected	Security
  Not selected	Not configured

• Devices > iOS/iPadOS > Configuration profiles > profile name > Properties > Configuration settings Edit > General > Block sending diagnostic and usage data to Apple

• Devices > Android > Configuration profiles > profile name > Properties > Configuration settings Edit > General > Diagnostic data (Samsung Knox only)

Block access to application store

For Android devices, this setting is only supported on Samsung Knox devices in Basic Mobility and Security.

For iOS, this setting is only supported on supervised iOS devices.

Three configuration profiles:

• Devices > Windows > Configuration profiles > profile name > Properties > Configuration settings Edit > App store > App store (mobile only)
• Devices > iOS/iPadOS > Configuration profiles > profile name > Properties > Configuration settings Edit > App store, Doc Viewing, Gaming > Block App store
• Devices > Android > Configuration profiles > choose a profile with type Device administrator > Properties > Configuration settings Edit > Google Play Store > Google Play store (Samsung Knox only)

Require password when accessing application store

This setting was never supported for Windows or Android in Basic Mobility and Security.

Apple doesn't block accessing the app store without a password, but blocks purchases without a password.

One configuration profile:

• Devices > iOS/iPadOS > Configuration profiles > profile name > Properties > Configuration settings Edit > App store, Doc Viewing, Gaming > Require iTunes Store password for all purchases

Block connection with removable storage

This setting was never supported for iOS/iPadOS in Basic Mobility and Security.

For Android devices, this setting is only supported on Samsung Knox devices in Basic Mobility and Security.

Two configuration profiles:

• Devices > Windows > Configuration profiles > profile name > Properties > Configuration settings Edit > General > Removable storage
• Devices > Android > Configuration profiles > choose a profile with type Device administrator > Properties > Configuration settings Edit > Cloud and Storage > Removable storage (Samsung Knox only)

Block Bluetooth connection

This setting was never supported for iOS/iPadOS in Basic Mobility and Security.

For Android devices, this setting is only supported on Samsung Knox devices in Basic Mobility and Security.

Two configuration profiles:

• Devices > Windows > Configuration profiles > profile name > Properties > Configuration settings Edit > > Cellular and connectivity > Bluetooth
• Devices > Android > Configuration profiles > choose a profile with type Device administrator > Properties > Configuration settings Edit > Cellular and connectivity > Bluetooth (Samsung Knox only)

Next steps

To migrate these policies, you can use the Migration evaluation tool.