Custom device settings for Windows 10 devices in Microsoft Intune

Applies to: Intune in the Azure portal
Looking for documentation about Intune in the classic portal? Go here.

Use the Microsoft Intune custom profile for Windows 10 and Windows 10 Mobile to deploy OMA-URI (Open Mobile Alliance Uniform Resource Identifier) settings that can be used to control features on devices. Windows 10 makes many CSP settings available, for example, the Policy Configuration Service Provider (Policy CSP). If you are looking for a particular setting, remember that the Windows 10 device restriction profile contains many settings that are built-in to Intune and do not require you to specify custom values.

  1. Use the instructions in How to configure custom device settings in Microsoft Intune to get started.
  2. On the Create Profile blade, choose Settings to add one or more OMA-URI settings.
  3. On the Custom OMA-URI Settings blade, click Add to add a new value. You can also click Export to create a list of all the values you configured in a comma-separated values (.csv) file.
  4. For each OMA-URI setting you want to add, enter the following information. Use the list in this topic to learn about the settings you can use:
    • Setting name - Enter a unique name for the OMA-URI setting to help you identify it in the list of settings.
    • Setting description - Optionally, enter a description for the setting.
    • Data type - Choose from:
      • String
      • String (XML)
      • Date and time
      • Integer
      • Floating point
      • Boolean
    • OMA-URI (case sensitive) - Specify the OMA-URI you want to supply a setting for.
    • Value - Specify the value to associate with the OMA-URI you entered.
  5. When you're done, go back to the Create Profile blade, and hit Create. The profile will be created and appears on the profiles list blade.


In the screenshot below, the setting Connectivity/AllowVPNOverCellular has been enabled. This lets a Windows 10 device open a VPN connection when on a cellular network.

Example of a custom policy containing VPN settings

How to find the policies you can configure

You’ll find a complete list of all configuration service providers (CSPs) that Windows 10 supports in the Configuration service provider reference in the Windows documentation library.

Not all settings are compatible with all Windows 10 versions. The table in the Windows topic tells you which versions are supported for each CSP.

Additionally, Intune does not support all of the settings listed in the topic. To find out if Intune supports the setting you want, open the topic for that setting. Each setting page shows it’s supported operation. To work with Intune, the setting must support the Add or Replace operations.