Configure device restriction settings in Microsoft Intune

Device restrictions let you control a wide range of settings and features you manage across a range of categories such as:

  • Security
  • Browser
  • Hardware
  • Data sharing settings

For example, you can create a device restriction profile that prevents users of iOS devices from accessing the device camera.

Learn device restriction profile basics, and then read further articles for each platform to learn about device specifics.

Create the profile

  1. Sign in to Intune.

  2. Select Device configuration > Profiles > Create profile.

  3. Enter a Name and Description for the device restriction profile.

  4. From the Platform drop-down list, select the device platform to which you want to apply custom settings. Currently, you can choose one of the following platforms for device restriction settings:

    • Android
    • Android enterprise
    • iOS
    • macOS
    • Windows Phone 8.1
    • Windows 8.1 and later
    • Windows 10 and later
  5. From the Profile type drop-down list, choose Device restrictions. To create a device restrictions profile for Windows 10 Team devices, such as Surface Hub, then choose Device restrictions (Windows 10 Team).

  6. Depending on the platform you chose, the settings you can configure are different. Choose your platform for detailed settings:

  7. When you're done, select OK > Create to save your changes.

The profile is created and shown on the profiles list.

Next steps

After the profile is created, it's ready to be assigned. Next, assign the profile and monitor its status.