Configuration profiles are how Intune pushes actual settings to a device — not just checking compliance, but changing something on the device itself.

Steps

1. In the Intune admin center, go to Devices > Configuration > Create > New Policy.
2. Choose the platform and a profile type — common ones include Settings catalog (build from any available setting), Templates (pre-built for things like Wi-Fi, VPN, or Endpoint Protection), or Device restrictions.
3. Name the profile clearly, e.g. "Windows – Corporate Wi-Fi" so it's obvious what it does later.
4. Configure the actual settings — for example, an SSID and authentication method for Wi-Fi, or restrictions like blocking the camera or requiring a screen lock.
5. Assign the profile to a device or user group.
6. Review and click Create.

Common Questions

How long does it take for a profile to apply to a device?

Devices check in with Intune periodically (typically within about 8 hours automatically), but a user can force an immediate check by opening the Company Portal app and syncing manually, or an admin can trigger a sync from the device's page in the admin center.

What happens if two profiles conflict?

Intune reports a conflict on the device's status page rather than guessing which one wins — it's worth checking the Device configuration conflict report periodically if you have several overlapping profiles.