| title | Remote Device Action: Pause Config Refresh |
|---|---|
| description | Learn how to temporarily pause policy enforcement on Windows 11 devices using Intune's Pause Config Refresh remote action to support troubleshooting and manual changes. |
| ms.date | 10/27/2025 |
| ms.topic | how-to |
| ms.reviewer | Mike Danoski |
Use the pause Config Refresh remote action in Microsoft Intune to temporarily suspend automatic policy enforcement on Windows 11 devices. This action is helpful when you need to troubleshoot, perform maintenance, or apply manual changes that shouldn't be overwritten by Intune policies.
Config Refresh is a Windows feature that periodically reapplies policy settings to ensure devices stay compliant with your defined configurations. IT admins can configure the refresh cadence to run as frequently as every 30 minutes or as infrequently as once every 24 hours (1,440 minutes).
With the pause Config Refresh action, IT admins can suspend policy refresh for a specified duration—up to 1,440 minutes. After the pause period ends, Config Refresh resumes automatically.
:::row::: :::column span="1"::: [!INCLUDE platform]
:::column-end::: :::column span="3":::
This remote action supports the following platforms:
Windows 11 :::column-end::: :::row-end::: :::row::: :::column span="1"::: [!INCLUDE device-configuration] :::column-end::: :::column span="3"::: To use this remote action, make sure devices meet the following requirements:
Config Refresh is enabled.
To learn more, see Config Refresh.
:::column-end::: :::row-end:::
:::row::: :::column span="1":::
[!INCLUDE rbac] :::column-end::: :::column span="3":::
To run this remote action, use an account with at least one of the following roles:
- Intune Administrator
- Custom role that includes:
- The permission Remote tasks/Run Pause Configuration Refresh
- Permissions that provide visibility into and access to managed devices in Intune (for example, Organization/Read, Managed devices/Read) :::column-end::: :::row-end:::
- In the Microsoft Intune admin center, select Devices > All devices.
- From the devices list, select a device.
- At the top of the device overview pane, find the row of remote action icons. Select Pause Config Refresh.
- Specify the number of minutes to pause Config Refresh in the Time period to Pause Config Refresh. The maximum is 1,440 minutes (24 hours).
- Select Pause.
Note
If Config Refresh is paused and you want to resume, then select Pause again for 0 minutes to resume Config Refresh enforcement.
- Microsoft Graph API: pauseConfigurationRefresh action in the Microsoft Graph API documentation.
- Configuration service provider (CSP) used to initiate the remote action: DMClient CSP