如何在 Microsoft Intune 中設定裝置限制設定How to configure device restriction settings in Microsoft Intune

適用於︰Azure 上的 IntuneApplies to: Intune on Azure
您需要傳統主控台中之 Intune 的相關文件嗎?Looking for documentation about Intune in the classic console? 請移至這裡Go to here.

裝置限制可讓您控制各種類別中,您所管理的各種設定及功能,包括安全性、瀏覽器、硬體及資料共用設定。Device restrictions let you control a wide range of settings and features you manage across a range of categories including security, browser, hardware, and data sharing settings. 例如,您可以建立裝置限制設定檔,禁止 iOS 裝置的使用者存取裝置相機 。For example, you could create a device restriction profile that prevents users of iOS devices from accessing the device camera.

使用本主題中的資訊,可深入了解設定裝置限制設定檔的相關基本概念,然後可深入閱讀每個平台的主題,以了解裝置專屬內容。Use the information in this topic to learn the basics about configuring device restriction profiles, and then read further topics for each platform to learn about device specifics.

建立內含裝置限制設定的裝置設定檔Create a device profile containing device restriction settings

  1. 登入 Azure 入口網站。Sign into the Azure portal.
  2. 選擇 [更多服務] > [監視 + 管理] > [Intune]。Choose More Services > Monitoring + Management > Intune.
  3. 在 [Intune] 刀鋒視窗中選擇 [設定裝置]。On the Intune blade, choose Configure devices.
  4. 在 [裝置設定] 刀鋒視窗中,選擇 [管理] > [設定檔]。On the Device Configuration blade, choose Manage > Profiles.
  5. 在設定檔刀鋒視窗中,選擇 [建立設定檔]。On the profiles blade, choose Create Profile.
  6. 在 [建立設定檔] 刀鋒視窗中,為裝置限制設定檔輸入 [名稱] 及 [描述]。On the Create Profile blade, enter a Name and Description for the device restriction profile.
  7. 從 [平台] 下拉式清單中,選取要套用自訂設定的裝置平台。From the Platform drop-down list, select the device platform to which you want to apply custom settings. 您目前可選擇下列平台之一,進行裝置限制設定︰Currently, you can choose one of the following platforms for device restriction settings:
    • AndroidAndroid
    • iOSiOS
    • macOSmacOS
    • Windows Phone 8.1Windows Phone 8.1
    • Windows 8.1 及更新版本Windows 8.1 and later
    • Windows 10 及更新版本Windows 10 and later
  8. 從 [設定檔類型] 下拉式清單中,選擇 [裝置限制]。From the Profile type type drop-down list, choose Device restrictions. 若想要建立像是 Surface Hub 等 Windows 10 團隊版裝置之裝置限制設定檔,選擇 [裝置限制 (Windows 10 團隊版)]。If you want to create a device restrictions profile for Windows 10 Team devices like a Surface Hub, choose Device restrictions (Windows 10 Team).
  9. 您可設定的設定值取決於您選擇的平台而有所不同。Depending on the platform you chose, the settings you can configure will be different. 前往下列主題之一,即可取得每個平台的詳細設定︰Go to one of the following topics for detailed settings for each platform:
  10. 當您完成時,請返回 [建立設定檔] 刀鋒視窗,然後點擊 [建立]。When you're done, go back to the Create Profile blade, and hit Create.

隨即會建立設定檔,並會出現在 [設定檔清單] 刀鋒視窗上。The profile will be created and appears on the profiles list blade. 若想繼續,並將此設定檔指派給群組,請參閱如何指派裝置設定檔If you want to go ahead and assign this profile to groups, see How to assign device profiles.

裝置限制設定範例Example of device restriction settings

在此概略範例中,您將建立會封鎖而無法使用 Android 裝置上內建相機應用程式的裝置限制原則。In this high-level example, you'll create a device restriction policy that blocks the use of the built-in camera app on Android devices.

如何停用 Android 裝置上的相機

若要提交意見反應,請前往 Intune Feedback