Creating a Custom Device Profile Microsoft Intune

This Microsoft Intune blog post will show how to create a custom device profile with Microsoft Intune.

Before diving into creating a custom device profile, let’s start by explaining what a custom device profile is.

In Microsoft Intune, a custom device profile is a configuration profile that includes settings unavailable in the built-in profiles (Email, VPN, Identity, Security).

We configure custom profiles using the Service Provider Reference, which lists all the settings needed for configuration items not in the built-in profiles.

Create a Custom Profile

In the following configuration, we will set a custom policy, apply the following configuration item (Allow lockout of administrator account), and set it not to allow.

To create a custom configuration profile for a Windows machine.

Open the Intune console

Create a new configuration profile

Select Custom template

Name the policy and move to the Configuration settings tab.

In the Configuration settings, click on Add.

Fill in the details using the reference link and set the value (0-1).

Name: AllowAdministratorLockout

Description: Allow Administrator account lockout

OMA-URL: ./Device/Vendor/MSFT/Policy/Config/DeviceLock/AllowAdministratorLockout

Data type: Integer

Value: 0