Use the settings catalog to configure settings on Windows and macOS devices - preview

Settings catalog lists the settings you can configure, and all in one place. This feature simplifies how you create a policy, and how you see all the available settings.

When you create the policy, you start from scratch. You add only the settings you want to control and manage. For example, you can use the settings catalog to create a BitLocker policy with all BitLocker settings, and all in one place in Intune.

Use the settings catalog as part of your mobile device management (MDM) solution to manage and secure devices in your organization.

This feature applies to:

  • macOS

    Configure Microsoft Edge version 77 and newer. Previously, you had to use a property list (plist) file (opens another Microsoft website). For a list of the settings you can configure, see Microsoft Edge - Policies (opens another Microsoft website). Be sure macOS is listed as a supported platform. If some settings aren't available in the settings catalog, then it's recommended to continue using the preference file.

  • Windows 10 and newer

    There are thousands of settings to choose, including settings that haven't been available before. These settings are directly generated from the Windows configuration service providers (CSPs). As Windows adds or exposes more settings to MDM providers, these settings are added quicker to Microsoft Intune for you to configure.


To see the Microsoft Edge policies you have configured, open Microsoft Edge, and go to edge://policy.

This article lists the steps to create a policy, and shows how to search and filter the settings in Intune. When you create the policy, it creates a device configuration profile. You can then assign or deploy this profile to devices in your organization.

Create the policy

  1. Sign in to the Microsoft Endpoint Manager admin center.

  2. Select Devices > Configuration profiles > Create profile.

  3. Enter the following properties:

    • Platform: Select macOS, or select Windows 10 and later.
    • Profile: Select Settings catalog (preview).
  4. Select Create.

  5. In Basics, enter the following properties:

    • Name: Enter a descriptive name for the profile. Name your profiles so you can easily identify them later. For example, a good profile name is macOS: MSFT Edge v77 settings or Win10: BitLocker settings for all Win10 devices.
    • Description: Enter a description for the profile. This setting is optional, but recommended.
  6. Select Next.

  7. In Configuration settings, select Add settings. In the settings picker, select a category to see all the available settings.

    For example, if you chose Windows 10 and later, then select Authentication to see all the settings in this category:

    In Settings Catalog, select Windows and select Authentication in Microsoft Intune and Endpoint Manager admin center.

    For example, if you chose macOS, then select Microsoft Edge - Startup, home page and new tab page to see all the settings in this category:

    In Settings Catalog, select macOS, and select a feature or category in Microsoft Intune and Endpoint Manager admin center.

  8. Select any setting you want to configure. Or, choose Select all these settings:

    In Settings Catalog, choose select all these settings in Microsoft Intune and Endpoint Manager admin center.

    After you add your settings, close the settings picker. All the settings are shown, and configured with a default value, such as Block or Allow. These defaults values are the same default values in the OS. If you don't want to configure a setting, then select the minus:

    In Settings Catalog, the default value in Microsoft Intune and Endpoint Manager admin center is the same as the OS default value.

    When you select the minus:

    • Intune doesn't change or update this setting. The minus is the same as Not configured.
    • The next time you open your policy, the setting isn't shown. You can add it again.


    In the Windows setting tooltips, Learn more links to the CSP.

  9. Select Next.

  10. In Assignments, select the users or groups that will receive your profile. For more information on assigning profiles, see Assign user and device profiles.

    Select Next.

  11. In Scope tags (optional), assign a tag to filter the profile to specific IT groups, such as US-NC IT Team or JohnGlenn_ITDepartment. For more information about scope tags, see Use RBAC and scope tags for distributed IT.

    Select Next.

  12. In Review + create, review your settings. When you select Create, your changes are saved, and the profile is assigned. The policy is also shown in the profiles list.

The next time the device checks for configuration updates, the settings you configured are applied.

Find some settings

There are thousands of settings available in the settings catalog. To make it easier to find specific settings, use the built-in features:

  • In your policy, use Add settings > Search to find specific settings. You can search by category, such as browser, search for a keyword, such as office, and search for specific settings.

    For example, search for internet explorer. All the settings with internet explorer are shown. Select a category to see the available settings:

    In Settings Catalog, search for Internet Explorer to see all the settings in Microsoft Intune and Endpoint Manager admin center.

  • In your policy, use Add settings > Add filter. Select the key, operator, and value. In value, you can filter to only show the settings that apply to Holographic for Business, Windows Enterprise, and other editions:

    In Settings Catalog, filter the settings list by Windows edition in Microsoft Intune and Endpoint Manager admin center.


Conflicts will happen if the same setting is updated to different values. The same conflicts happen with policies configured using the settings catalog. For more information on conflict resolution, see:

Next steps

Be sure to assign the profile, and monitor its status.

For more information on device configuration policies, see Device configuration overview and Create a device profile.