This lab demonstrates how to create a configuration profile in Intune using the Settings Catalog to deploy settings such as OneDrive automatic sign-in or desktop wallpaper enforcement. Configuration profiles allow IT teams to define and enforce system settings across all managed Windows endpoints.
Who:
Desktop Engineers at a national consulting firm responsible for Windows laptop provisioning.
What:
A configuration profile will be created to enforce OneDrive automatic sign-in is enabled.
Where:
Microsoft Intune Admin Center → Devices → Configuration profiles.
When:
During the initial provisioning phase or when rolling out a new baseline config.
Why:
To automate endpoint configuration, improve security posture, and reduce the need for manual setup during onboarding.
Open a browser and go to:
https://intune.microsoft.com
Sign in using a Global Administrator or Intune Administrator account.
Explanation:
This step grants access to the Microsoft Intune Admin Center, which is required to manage configuration profiles. Using a Global or Intune Administrator account ensures all necessary features are accessible.
Navigate to:
Devices > Windows > Configuration profiles
Click + Create policy
Set:
- Platform: Windows 10 and later
- Profile type: Settings catalog
Click Create
Explanation:
This initiates the configuration process. The selected platform and profile type define the target OS and the method for choosing settings. The Settings Catalog provides a comprehensive set of options tailored to modern Windows devices.
Name the profile:
Baseline - OneDrive
Click Next, then + Add settings
Search for and add:
- OneDrive > Silently sign in users to the OneDrive sync app with their Windows credentials → Enabled
Under Assignments, choose a device group (e.g., All Laptops or All Windows Devices).
Optionally, apply filters for OS or device attributes.
Click Next
Explanation:
Assignments determine which devices will receive the settings. Filters can further refine deployment, ensuring that only the appropriate endpoints are targeted. This approach supports dynamic, automated policy delivery without manual intervention.
Review all configuration settings and group assignments.
Click Create
Explanation:
This final review allows validation of all selections. Once confirmed, creating the profile will deploy it to the targeted devices, initiating policy enforcement.
On a Windows device targeted by the profile:
- Open Settings > Accounts > Access work or school, and click the connected work account.
- Click on the Connected by and Select Info and click Sync to force a policy update.
- Restart the computer and OneDrive will sign in automatically with the work account.
This configuration profile automatically enforces OneDrive login supporting secure and consistent Windows device deployments. Configuration profiles eliminate the need for manual registry edits or Group Policy changes, allowing scalable enforcement of key settings through Microsoft Intune.