什麼是 Microsoft Intune 裝置設定檔?What are Microsoft Intune device profiles?

適用於︰Azure 上的 IntuneApplies to: Intune on Azure
您需要傳統主控台中之 Intune 的相關文件嗎?Looking for documentation about Intune in the classic console? 請移至這裡Go to here.

使用 Microsoft Intune 的「裝置設定」工作負載,以管理您管理之所有裝置上的設定及功能。Use the Microsoft Intune Device configuration workload to manage settings and features on all of the devices you manage. 您大部分會使用此工作負載來建立裝置設定檔,讓您管理和控制裝置上的各種不同功能。You mostly use this workload to create device profiles, which let you manage and control a whole range of different features and functionality on devices.

當您開啟此工作負載時,會顯示下列選項:When you open this workload, you see the following options:

  • 概觀 - 此頁面提供狀態及報表,可協助您監視您指派給使用者及裝置的裝置設定。Overview - This page gives you status and reports that help you monitor device configurations that you have assigned to users and devices.
  • 管理設定檔 - 您可以在此區段中建立裝置組態設定檔。Manage Profiles - This section is where you go to create device configuration profiles. 您可以稍後在本主題中找到您能建立之所有設定檔類型的清單。You can find a list all the profile types you can create later in this topic.
  • 設定憑證授權單位 - 此工作流程會逐步引導您執行設定 Intune 憑證設定檔所需的步驟。Setup Certificate Authority - This workflow walks you though the steps required to configure Intune certificate profiles.

開始使用Getting started

建立裝置設定檔的工作流程與所有設定檔的建立工作流程類似。The workflow for creating device profiles is similar for all profiles. 如需詳細資訊,請參閱如何建立 Microsoft Intune 的裝置組態設定檔Read How to create Microsoft Intune device configuration profiles for information. 另外也請閱讀建立每種設定檔類型設定的特有資訊。Then read on for specific information about creating settings for each profile type.

您可以管理您裝置上的下列功能︰You can manage the following capabilities on your devices:

裝置功能Device features

裝置功能可讓您控制 iOS 和 macOS 裝置上的功能,例如 AirPrint、通知,以及共用的裝置設定。Device features let you control features on iOS and macOS devices like AirPrint, notifications, and shared device configurations. 如需詳細資訊,請參閱如何設定裝置功能設定支援:iOS 和 macOS。For more information, see How to configure device feature settings Supports: iOS and macOS.

裝置限制Device restrictions

裝置限制可讓您在所管理的裝置上控制各種類別的設定,包括安全性、硬體及資料共用設定。Device restrictions let you control many settings on devices you manage across categories including security, hardware, and data sharing settings. 例如,您可以建立裝置限制設定檔,禁止 iOS 裝置的使用者存取裝置相機 。For example, you could create a device restriction profile that prevents users of iOS devices from accessing the device camera. 如需詳細資訊,請參閱如何設定裝置限制設定 支援︰Android、iOS、macOS、Windows 10 及 Windows 10 Team。For more information, see How to configure device restriction settings Supports: Android, iOS, macOS, Windows 10, and Windows 10 Team.

電子郵件Email

電子郵件設定檔可讓您建立、指派及監視您所管理裝置上的 Exchange ActiveSync 電子郵件設定。Email profiles let you create, assign, and monitor Exchange ActiveSync email settings on devices you manage. 電子郵件設定檔可協助確保一致性、減少支援來電,以及讓使用者無須任何設定,就能從其個人裝置存取公司的電子郵件。Email profiles help ensure consistency, reduce support calls, and let end-users access company email on their personal devices without any required setup on their part. 如需詳細資訊,請參閱如何設定電子郵件設定 支援:Android、iOS、Windows Phone 8.1 及 Windows 10。For more information, see How to configure email settings Supports: Android, iOS, Windows Phone 8.1, and Windows 10.

Wi-FiWi-Fi

使用 Wi-Fi 設定檔將無線網路設定指派給組織中的使用者與裝置。Use Wi-Fi profiles to assign wireless network settings to users and devices in your organization. 若您指派 Wi-Fi 設定檔,使用者不需要自行設定即可存取您公司的 Wi-Fi。When you assign a Wi-Fi profile, your users get access to your corporate Wi-Fi without having to configure it themselves. 如需詳細資訊,請參閱如何設定 Wi-Fi 設定 支援︰ Android、iOS、macOS 及 Windows 8.1 (僅限匯入)。For more information, see How to configure Wi-Fi settings Supports: Android, iOS, macOS, and Windows 8.1 (import only).

VPNVPN

虛擬私人網路 (VPN) 為您的使用者提供安全的公司網路遠端存取。Virtual private networks (VPNs) give your users secure remote access to your company network. 裝置使用 VPN 連線設定檔來啟動與 VPN 伺服器的連線。Devices use a VPN connection profile to initiate a connection with the VPN server. 將 VPN 設定指派給組織中的使用者與裝置,讓他們可以輕鬆又安全地連線到網路。Assign VPN profiles to users and devices in your organization, so they can easily and securely connect to the network. 如需詳細資訊,請參閱如何設定 VPN 設定For more information, see How to configure VPN settings. 支援︰Android、iOS、macOS、Windows Phone 8.1、Windows 8.1 及 Windows 10。Supports: Android, iOS, macOS, Windows Phone 8.1, Windows 8.1, and Windows 10.

教育Education

可讓您設定 Windows「進行測驗」應用程式的選項。Lets you configure options for the Windows Take a Test app. 當您設定這些選項時,裝置將無法執行其他應用程式,直到測驗結束為止。When you configure these options, no other apps can run on the device until the test is complete. 如需詳細資訊,請參閱如何設定教育設定For more information, see How to configure education settings

憑證Certificates

此設定檔類型可讓您設定信任的憑證、SCEP 憑證及 PKCS 憑證指派給裝置,以及用於驗證 Wi-Fi、VPN 及電子郵件設定檔。This profile type lets you configure trusted, SCEP, and PKCS certificates that can be assigned to devices and used to authenticate Wi-Fi, VPN, and email profiles. 如需詳細資訊,請參閱如何設定憑證 支援︰Android、iOS、Windows Phone 8.1、Windows 8.1 及 Windows 10。For more information, see How to configure certificates Supports: Android, iOS, Windows Phone 8.1, Windows 8.1, and Windows 10.

版本升級Edition upgrade

此設定檔類型可讓您自動將執行下列某些 Windows 10 版本的裝置,升級為較新的版本。This profile type lets you automatically upgrade devices that run some versions of Windows 10 to a newer edition. 如需詳細資訊,請參閱如何設定 Windows 10 版本升級 支援︰僅限 Windows 10。For more information, see How to configure Windows 10 edition upgrades Supports: Windows 10 only.

Endpoint ProtectionEndpoint protection

此設定檔類型可讓您設定 Windows 10 裝置的 BitLocker 設定。This profile type lets you configure BitLocker settings for Windows 10 devices. 如需詳細資訊,請參閱 Windows 10 的 Endpoint protection 設定 支援:僅限 Windows 10。For more information, see Endpoint protection settings for Windows 10 Supports: Windows 10 only.

Windows 資訊保護Windows Information Protection

Windows 資訊保護可協助防範資料流失,但不會干擾員工的操作。Windows Information Protection helps to protect against data leakage without otherwise interfering with the employee experience. 它也能協助保護企業應用程式與資料,防止企業擁有的裝置和員工帶到公司的個人裝置意外外洩資料,而且不需要對您的環境或其他應用程式進行任何變更。It also helps to protect enterprise apps and data against accidental data leaks on enterprise-owned devices and personal devices that employees bring to work without requiring changes to your environment or other apps. 如需詳細資訊,請參閱如何設定 Windows 資訊保護 支援︰僅限 Windows 10。For more information, see How to configure Windows Information Protection Supports: Windows 10 only.

自訂Custom

自訂設定可讓您指派不屬於 Intune 內建設定的裝置設定。Custom settings let you assign device settings that are not built-into Intune. 例如在 Android 裝置上,您可以指定 OMA-URI 值來設定裝置。For example, on Android devices, you can specify OMA-URI values that configure the device. 對於 iOS 裝置,您可以匯入您在 Apple Configurator 中建立的設定檔。For iOS devices, you can import a configuration file you created in the Apple Configurator. 如需詳細資訊,請參閱如何設定自訂設定 支援︰ Android、iOS、macOS 及 Windows 8.1。For more information, see How to configure custom settings Supports: Android, iOS, macOS, and Windows Phone 8.1.

後續步驟Next steps

從清單中選擇其中一個設定檔類型,開始進行裝置設定。Choose one of the profile types from the list to get started configuring devices.

若要提交意見反應,請前往 Intune Feedback