Migrating User Rights Assignments Policies to InTune

Rob Torquemada 0 Reputation points
2024-04-04T21:03:26.1166667+00:00

I have a number of GPOs I want to migrate. Some of these have User Rights Assignments settings, such as the Allow Log on Locally setting, so for the sake of safety, I want to keep the old GPOs in place.

I have tried using a configuration profile and the user rights options in that, but I keep getting a 65000 error.

I have tried using OMA-URI settings, they also give errors, although it seems the settings do apply ok.

I could use a script to set these options, but then they wouldn't be enforced.

I was just wondering if other people had run into similar problems, and if so, what method they used to configure these options in InTune.

Active Directory
Active Directory
A set of directory-based technologies included in Windows Server.
5,898 questions
Microsoft Intune Configuration
Microsoft Intune Configuration
Microsoft Intune: A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.Configuration: The process of arranging or setting up computer systems, hardware, or software.
1,729 questions

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. ZhoumingDuan-MSFT 8,065 Reputation points Microsoft Vendor
    2024-04-05T05:17:26.69+00:00

    @Rob Torquemada,Thanks for posting in Q&A.

    From your description, I know you want to Migrate User Rights Assignments Policies to Intune.

    Based on my research, we can create a Settings Catalog policy using your imported GPOs in Microsoft Intune.

    Here is a link with detailed information you can refer.

    https://learn.microsoft.com/en-us/mem/intune/configuration/group-policy-analytics-migrate

    If there is any unclear, feel free to let us know.

    If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.