Planning for device profiles

Device profiles contain configuration and compliance settings that can be pushed out to devices. For example, this ability allows administrators to bring organization-owned Windows devices to a compliant state in bulk, or to make adjustments to a master profile and implement them efficiently. These profiles contain such settings as the following:

• Administrative templates (groups of settings, similar to group policy)
• Device features
• Device restrictions
• Endpoint protection
• Identity protection
• VPN
• Wi-Fi
• Windows Defender ATP
• Windows Information Protection

Device profiles are also available to be configured for iOS and Android devices. These device profiles may include permission to use AirPrint printers in the organization, email profile configurations, Wi-Fi or VPN access, and more.

Devices that aren't personally owned or used for work by a single individual may also be managed by device profiles, such as an Android device used as a single-purpose kiosk for which the device profile would restrict web access, or app installations/usage outside the primary purpose.

Let's look at how we assign profiles to devices.