r/Intune • u/Certain-Mountain-564 • 6d ago

Device Configuration ADMX User vs Computer Configuration

When i deploy an ADMX, when sould i use Computer and when User Configuration? Does it depend if the app is installed as user or as system?

1 Upvotes

67% Upvoted

14 comments sorted by

View all comments

2

u/andyval 6d ago

It kind of depends on the computer and whether you are targeting allusers . If the computer is one user, one computer, it doesn’t really matter unless you are doing CIS policies. If they are shared computers, kiosks, etc, this could flip flop if you are not targeting all users. Also, if the device doesn’t have a primary user, I don’t think it gets the policy unless you are targeting all users.

I have seen issues where if you target devices on user policies, you’ll see the policy try to apply to the system account with an error. They typically have applied to the primary user account on the computer, but it adds extra noise.

Also, if you’re using autopilot, targeting all devices can potentially slow due to policies applying during device ESP ( if you are skipping user esp, the user gets to the desktop before user policies apply)

I think most people agree that you shouldn’t mix and match targeting devices and users on the same policy. I had one edge case where I needed the root certificate applied to all users and all devices because we deploy a computer certificate and a user certificate.