Skip to content

Commit de32b69

Browse files
author
Angela Fleischmann
authored
Fix formatting
in lists for consistency. Renumbered items to consistently include "next" or "create" instructions.
1 parent 1527d64 commit de32b69

1 file changed

Lines changed: 11 additions & 19 deletions

File tree

memdocs/intune/configuration/device-firmware-configuration-interface-windows.md

Lines changed: 11 additions & 19 deletions
Original file line numberDiff line numberDiff line change
@@ -61,6 +61,7 @@ When you reinstall an older Windows version, install a separate OS, or format th
6161
Autopilot deployment profiles are assigned to Azure AD security groups. Be sure to create groups that include your DFCI-supported devices. For DFCI devices, most organization may create device groups, instead of user groups. Consider the following scenarios:
6262

6363
- Human Resources (HR) has different Windows devices. For security reasons, you don't want anyone in this group to use the camera on the devices. In this scenario, you can create an HR security users group so the policy applies to users in the HR group, whatever the device type.
64+
6465
- On the manufacturing floor, you have 10 devices. On all devices, you want to prevent booting the devices from a USB device. In this scenario, you can create a security devices group, and add these 10 devices to the group.
6566

6667
For more information on creating groups in Intune, see [Add groups to organize users and devices](../fundamentals/groups-add.md).
@@ -85,31 +86,23 @@ This profile includes the DFCI settings you configure.
8586
2. Select **Devices** > **Configuration profiles** > **Create profile**.
8687
3. Enter the following properties:
8788

88-
- **Platform**: Choose **Windows 10 and later**.
89-
- **Profile**: Select **Templates** > **Device Firmware Configuration Interface**.
89+
- **Platform**: Choose **Windows 10 and later**.
90+
- **Profile**: Select **Templates** > **Device Firmware Configuration Interface**.
9091

9192
4. Select **Create**.
9293
5. In **Basics**, enter the following properties:
9394

9495
- **Name**: Enter a descriptive name for the profile. Name your policies so you can easily identify them later. For example, a good profile name is **Windows: Configure DFCI settings on Windows devices**.
9596
- **Description**: Enter a description for the profile. This setting is optional, but recommended.
9697

97-
6. Select **Next**.
98-
7. In **Configuration settings**, configure the settings you want to control in the UEFI firmware layer. For a list of all the settings, and what they do, see:
99-
100-
- [Windows](device-firmware-configuration-interface-windows-settings.md)
101-
102-
8. Select **Next**.
103-
104-
9. In **Scope tags** (optional), assign a tag to filter the profile to specific IT groups, such as `US-NC IT Team` or `JohnGlenn_ITDepartment`. For more information about scope tags, see [Use RBAC and scope tags for distributed IT](../fundamentals/scope-tags.md).
105-
106-
Select **Next**.
107-
108-
10. In **Assignments**, select the users or user group that will receive your profile. For more information on assigning profiles, see [Assign user and device profiles](device-profile-assign.md).
109-
110-
Select **Next**.
111-
112-
11. In **Review + create**, review your settings. When you select **Create**, your changes are saved, and the profile is assigned. The policy is also shown in the profiles list.
98+
Select **Next**.
99+
6. In **Configuration settings**, configure the settings you want to control in the UEFI firmware layer. For a list of all the settings, and what they do, see [Windows](device-firmware-configuration-interface-windows-settings.md).
100+
Select **Next**.
101+
7. In **Scope tags** (optional), assign a tag to filter the profile to specific IT groups, such as `US-NC IT Team` or `JohnGlenn_ITDepartment`. For more information about scope tags, see [Use RBAC and scope tags for distributed IT](../fundamentals/scope-tags.md).
102+
Select **Next**.
103+
8. In **Assignments**, select the users or user group that will receive your profile. For more information on assigning profiles, see [Assign user and device profiles](device-profile-assign.md).
104+
Select **Next**.
105+
9. In **Review + create**, review your settings and select **Create**. When you select **Create**, your changes are saved, and the profile is assigned. The policy is also shown in the profiles list.
113106

114107
The next time each device checks in, the policy is applied.
115108

@@ -128,7 +121,6 @@ The next time the device syncs with Intune, Windows receives the DFCI settings.
128121
If you want to change existing DFCI settings on devices that are in use, you can. In your existing DFCI profile, change the settings, and save your changes. Since the profile is already assigned, the new DFCI settings take effect when:
129122

130123
1. The device checks in with the Intune service to review profile updates. Check-ins happen at various times. For more information, see [when devices get a policy, profile, or app updates](../configuration/device-profile-troubleshoot.md#how-long-does-it-take-for-devices-to-get-a-policy-profile-or-app-after-they-are-assigned).
131-
132124
2. To enforce the new settings, reboot the device [remotely](../remote-actions/device-restart.md) or locally.
133125

134126
You can also [signal devices to check in](../remote-actions/device-sync.md). After a successful sync, [signal to reboot](../remote-actions/device-restart.md).

0 commit comments

Comments
 (0)