Skip to content

import-custom-admx-templates.md

Latest commit

 

History

History
173 lines (107 loc) · 10.1 KB

import-custom-admx-templates.md

File metadata and controls

173 lines (107 loc) · 10.1 KB
title Import custom and third-party partner ADMX templates in Microsoft Intune
description You can add, upload, or import custom and third-party partner ADMX and ADML files in Microsoft Intune. When they're imported, create a device configuration profile and assign the profile to your Windows 10/11 client devices.
ms.date 09/04/2025
ms.topic how-to
ms.reviewer mikedano, kabalu
ms.collection
M365-identity-device-management

Import custom ADMX and ADML administrative templates into Microsoft Intune (public preview)

You can import custom and third-party/partner ADMX and ADML templates into the Intune admin center. Once imported, you can create a device configuration policy using these settings, and then assign the policy to your managed devices.

This feature applies to:

  • Windows

This article shows you how to import custom ADMX and ADML files in the Intune admin center.

Tip

The settings catalog has many settings natively built-in to Intune, including Google Chrome. For more information, go to:

What you need to know

  • [!INCLUDE minimum-rbac-role-policy-profile-manager]

    To modify or update an ADMX policy with the Not Configured setting, RBAC administrators need the Device configurations > Delete permission. The built-in Policy and Profile Manager role has this permission.

  • This feature is in public preview.

  • There are some limits:

    • A maximum of 20 ADMX files can be uploaded. Each file must be 1 MB or smaller.
    • For each ADMX file, only one ADML file can be uploaded.
    • Each ADMX file supports one language.
    • Only en-us ADML files are supported.

  • Some ADMX files have dependency prerequisites. Import any dependency ADMX files first. If you upload an ADMX file without the dependency, an error message lists the missing namespace.

    For example, to import Mozilla Firefox ADMX and ADML files, you:

    1. Import the mozilla.admx and mozilla.adml files. Make sure the status shows Available.
    2. Import the firefox.admx and firefox.adml files.

    If you upload firefox.admx before mozilla.adml, then the import fails.

    To see if your ADMX has a dependency, open the ADMX file in a text editor, go to the policyNamespaces node, and look for using prefix. Any dependencies are listed.

    In the following example, thekerberos.admx file requires the Windows.admx file:

     <policyNamespaces>
    <target prefix="kerberos" namespace="Microsoft.Policies.Kerberos" />
    <using prefix="windows" namespace="Microsoft.Policies.Windows" />
  </policyNamespaces>

    To remove a dependency prerequisite, delete the associated ADMX file first. Then, delete the dependency prerequisite. In our Mozilla Firefox example, delete firefox.admx and then delete mozilla.admx.

  • Some files might require Windows.admx as a prerequisite. This file must be uploaded first. In a future release (no ETA), this namespace will be automatically included and eventually not be required.

    If Windows.admx is required and not uploaded, then you can get the following error message:

    ADMX file referenced not found NamespaceMissing:Microsoft.Policies.Windows. Please upload it first.

  • Currently, the combo box setting type isn't supported. ADMX files with the combo box setting type fail to import. All other setting types are supported.

  • Not all areas of the registry can be set using custom ADMX. For more information on the registry locations that can be used, go to Win32 and Desktop Bridge app ADMX policy Ingestion Overview.

  • ADMX settings that are built into Windows (located in the C:\Windows\PolicyDefinitions folder) are enabled through configuration service providers (CSPs).

    • Don't import these built-in settings if your intent is to configure them. Instead, use the settings catalog or a custom profile.
    • Do import these built-in settings if they're a required parent namespace of another file.

    For a list of the ADMX backed CSP settings, go to ADMX-backed policies in Policy CSP.

Download the ADMX templates

Download the ADMX templates you want to import. Save these files to an easily accessible folder, like C:\ADMXTemplates. Some common ADMX template downloads include:

  • Adobe Reader
  • Mozilla Firefox
  • Zoom

Add the ADMX and ADML files

  1. Sign in to the Microsoft Intune admin center.

  2. Select Devices > Manage devices > Configuration > Import ADMX tab > Import:

    :::image type="content" source="./media/import-custom-admx-templates/import-admx.png" alt-text="Screenshot that shows how to add or import custom ADMX and ADML. Go to Devices > Configuration profiles > Import ADMX in the Microsoft Intune admin center.":::

    Or, you can also import from Devices > By platform > Windows > Manage devices > Configuration > Import ADMX tab.

  3. Upload your files:

    • ADMX file: Select the ADMX file you want to upload.
    • ADML file for the default language: Select the ADML file you want to upload. Remember, you can add only one language file for each ADMX file you upload. For any other limitations, go to What you need to know (in this article).
    • Specify the language of the ADML file: Shows the ADML language of the file you uploaded.

  4. Select Next.

  5. In Review + Create, review your changes. Select Create to import the files.

When the import completes, your ADMX templates are shown in the list. You can also:

  • Select Refresh to see the updated state.
  • See the upload Status.
  • Delete an imported template.

:::image type="content" source="./media/import-custom-admx-templates/imported-templates-refresh-delete.png" alt-text="Screenshot that shows how to refresh and delete imported custom ADMX and ADML administrative templates in Microsoft Intune and Intune admin center.":::

Create a profile using your imported files

  1. Sign in to the Microsoft Intune admin center.

  2. Select Devices > Manage devices > Configuration > Create > New policy.

  3. Enter the following properties:

    • Platform: Select Windows 10 and later.

    • Profile type: Select Templates > Imported Administrative templates (Preview):

      :::image type="content" source="./media/import-custom-admx-templates/select-imported-administrative-templates.png" alt-text="Screenshot that shows how to select imported administrative templates to create a device configuration profile using the imported ADMX settings in the Microsoft Intune admin center.":::

  4. Select Create.

  5. In Basics, enter the following properties:

    • Name: Enter a descriptive name for the profile. Name your profiles so you can easily identify them later. For example, a good profile name is ADMX: Mozilla Firefox for Windows devices.
    • Description: Enter a description for the profile. This setting is optional, but recommended.

  6. Select Next.

  7. In Configuration settings, select and configure the settings you want in your policy. When finished, select Next.

  8. In Scope tags (optional), assign a tag to filter the profile to specific IT groups, such as US-NC IT Team or JohnGlenn_ITDepartment. For more information about scope tags, see Use role-based access control (RBAC) and scope tags for distributed IT.

    Select Next.

  9. In Assignments, select the user or groups that will receive your profile. For more information on assigning profiles, see Assign user and device profiles in Intune.

    If the profile is assigned to user groups, then configured ADMX settings apply to any device that the user enrolls, and signs in to. If the profile is assigned to device groups, then configured ADMX settings apply to any user that signs into that device. This assignment happens if the ADMX setting is a computer configuration (HKEY_LOCAL_MACHINE), or a user configuration (HKEY_CURRENT_USER). With some settings, a computer setting assigned to a user can also affect the experience of other users on that device.

    For more information, see User groups vs. device groups when assigning policies.

    Select Next.

  10. In Review + create, review your settings. When you select Create, your changes are saved, and the profile is assigned. The policy is also shown in the profiles list.

Replace existing ADMX files

If you upload an ADMX file with settings that are already imported, then the upload fails.

For example, if you upload a different version of an ADMX file that has the same settings as the original ADMX file, then the upload fails with a namespace error.

To update existing ADMX files that are imported, you have the following options:

  • Option 1: Replace the existing ADMX file

    To replace an existing ADMX file with the same settings, you can use the following steps:

    1. Delete any profiles using the existing ADMX settings.
    2. Delete the original ADMX file you imported.
    3. Import the new ADMX and ADML files.

  • Option 2: Create a new ADMX file

    1. Create another version of the ADMX file with a different namespace than the original ADMX file. We recommend you add a version number in the namespace so the names are different.
    2. Add the new and different settings to this ADMX file.
    3. Import the new ADMX and ADML files.

Related articles

Use the settings catalog to configure settings