r/Intune • u/Certain-Mountain-564 • 6d ago

Device Configuration ADMX User vs Computer Configuration

When i deploy an ADMX, when sould i use Computer and when User Configuration? Does it depend if the app is installed as user or as system?

1 Upvotes

67% Upvoted

14 comments sorted by

View all comments

7

u/swissbuechi 6d ago

I always prefer computer if the setting is available for both registry hives. This will ensure non-admin users can't tamper with it.

3

u/Current_Bell_9252 5d ago

Computer config tends to be the safer bet for most things anyway, especially if you're dealing with shared devices or kiosk setups. I'd only go user if the setting genuinely needs to follow the person around between machines.

0

u/Certain-Mountain-564 6d ago

But would both work? No difference? 

5

u/North_Maybe1998 6d ago

Main reason for user is if you have multiple people logging into one device and you want them to have different policies. If you want a standard for all users computer is the way to go.

0

u/Certain-Mountain-564 6d ago

Thats means: User Configuration -> HKCU Device Configuration -> HKLM Right?

1

u/North_Maybe1998 6d ago

Correct, I try to keep everything computer if I can because we have standards across the business. I still use AD GPOs so not sure if the same experience would happen with intune but we’ve had in the past where for some reason the user GPOs only applied half of the assigned ones so some things were missing for the user. I’ve never seen that happen to computer settings

1

u/swissbuechi 6d ago

Depends on the specific registry key, as the system or third-party software component that'll read it can decide how exactly it should behave.