You have a Microsoft 365 subscription. All devices run Windows 10.
You need to prevent users from enrolling the devices in the Windows Insider Program.
What two configurations should you perform from the Microsoft Intune admin center? Each correct answer is a complete solution.
NOTE: Each correct selection is worth one point.
To prevent users from enrolling their devices in the Windows Insider Program through Microsoft Intune, you need to configure a custom device configuration profile and a Windows 10 and later update ring. A custom device configuration profile allows you to define specific settings and restrictions that are not available in the standard device restriction profiles, including settings for managing preview builds. The Windows 10 and later update ring helps you control the Windows update settings, including whether or not to allow pre-release builds, which is essential in managing Insider Program enrollments.
Given answers are correct. Ref: https://learn.microsoft.com/en-us/windows-insider/business/manage-builds#set-up-insider-preview-builds-using-intune Ref: https://learn.microsoft.com/en-us/windows/client-management/mdm/policy-csp-Update?WT.mc_id=Portal-fx#managepreviewbuilds
I think it should be A and D. A. Device restrictions device configuration profile: You can use this profile to enforce specific settings on Windows 10 devices, including preventing enrollment in the Windows Insider Program. D. Custom device configuration profile: Creating a custom device configuration profile allows you to define specific settings and restrictions for your Windows 10 devices, including preventing enrollment in the Windows Insider Program.
Device restriction: no windows update reference, so no Insider App policy has no business here Security baseline has no Insider setting Custom profile: CSP/OMA-RUI for Update/ManagePreviewBuilds Update ring: "Enable pre-release builds" So, DE is correct
DE. It is not in Device Restrictions. It is Configuration -> Setting Catalog -> Windows Update for Business -> Manage Preview Builds. This option is not there. So its D and E.
DE is correct.
A. Create a device restrictions device configuration profile E. Create a Windows 10 and later update ring
A : If you set Telemetery to required in Device Restrictions, they cannot get preview builds as it needs Optional Telemetery. E: Use update ring to block preview builds. Source: I just implemented this last week.
A and E. To prevent users from enrolling their devices in the Windows Insider Program using Microsoft Intune, you can perform the following configurations: Device Restrictions Device Configuration Profile: This configuration allows you to set up restrictions on the devices. You can create a device restrictions profile in Intune to control features on enrolled devices. Windows 10 and Later Update Ring: This configuration allows you to manage when Windows 10 updates are received by devices in your organization. You can create an update ring in Intune to specify how and when updates are delivered to devices
A device restrictions device configuration profile allows you to control various settings on Windows 10 devices, including preventing users from enrolling in the Windows Insider Program. A Windows 10 and later update ring allows you to control the update behavior of Windows 10 devices, including specifying which updates and builds are installed on the devices. By configuring this, you can prevent users from accessing preview builds, which are part of the Windows Insider Program.
A. Device restrictions device configuration profile: This profile allows you to restrict access to specific features and settings on devices. Under "Windows Feature Experience", configure "Allow access to diagnostic data in the Windows Insider Program" to "Block". E. Windows 10 and later update ring: Update rings control which updates devices receive through Intune. Create a new update ring with the "Update channel" set to "None (security updates only)". Assign this update ring to the devices you want to prevent from joining the Insider Program.
The 30 days represents an upgrade of Windows Version through a feature update not a standard feature update
DE Ref: https://www.petervanderwoude.nl/post/managing-windows-insider-preview-builds-within-the-organization/
I would go for A and D.
custom is almost legacy as it requires OMA-URI, always the last resort
seems correct
Option A,C
D can be used in two ways either with a custom setting and OMA-URI or using the settings catalog /Windows Update for Business/Manage Preview Builds. Nothing found under Device Restrictions