question

DjordjeNovakovic-1142 avatar image
0 Votes"
DjordjeNovakovic-1142 asked LuDaiMSFT-0289 commented

MDMWinsOverGPO - policy conflict

Hello,

after applying Windows Update ring on pilot collection(co-management environment) some machines have all policies applied from MDM and others have visible both MDM and GPO:
116968-2.jpg




Does this mean that we have to apply configuration profile MDM Policy Wins over GPO in order to resolve conflict between MDM and GPO?

Thanks

mem-intune-generalmem-intune-device-configurations
2.jpg (85.8 KiB)
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

1 Answer

Jason-MSFT avatar image
0 Votes"
Jason-MSFT answered LuDaiMSFT-0289 commented

Does this mean that we have to apply configuration profile MDM Policy Wins over GPO in order to resolve conflict between MDM and GPO?

No, it means you should stop deploying policies from two separate management authorities for the same settings to the same device(s).

The MDM Wins Over GPO setting is not universal and relying on it is asking for problems.

· 3
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

@DjordjeNovakovic-1142 Thanks for posting in our Q&A.

For this issue, Jason's answer is very detailed and the MDM Wins Over GPO setting is not recommended.

For this setting, I just add a few content. This policy can't be changed once applied. It doesn't support the Delete command and doesn’t support setting the value to 0 again after it was previously set to 1. We can refer to the following article about this policy:
https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-controlpolicyconflict#controlpolicyconflict-policies

Thanks for understanding.

1 Vote 1 ·

Thank you!

0 Votes 0 ·

@DjordjeNovakovic-1142 You're welcome. If you have any issue in the future, welcome to post in our Q&A.

Thanks and have a nice day. : )

0 Votes 0 ·