Windows 10: Azure configuration profile not applicable for user accounts logged into desktops and iPhones

We're facing such a strange issue,We're applying screen lock policy via configuration profiles for devices Windows 10 and later. This is successful for all profiles signed into a desktop, but if a profile is signed into a phone and a desktop, the policy shows "not applicable" even though policy should not apply to phones.We're setting screen lock using OMA-URI settings, by using ./Device/Vendor/MSFT/Policy/Config/DeviceLock/MaxInactivityTimeDeviceLock and setting integer to 15.We point the policy at groups whose members are devices. Once the device syncs, the system profile shows as "success

:)

 

Azure configuration profile not applicable for user accounts logged into desktops and iPhones

We're facing such a strange issue,

We're applying screen lock policy via configuration profiles for devices Windows 10 and later. This is successful for all profiles signed into a desktop, but if a profile is signed into a phone and a desktop, the policy shows "not applicable" (even though policy should not apply to phones).

We're setting screen lock using OMA-URI settings, by using ./Device/Vendor/MSFT/Policy/Config/DeviceLock/MaxInactivityTimeDeviceLock and setting integer to 15.

We point the policy at groups whose members are devices. Once the device syncs, the system profile shows as "successful" for policy, and then the user profile (*** Email address is removed for privacy ***) will show as successful.

As soon as *** Email address is removed for privacy *** signs into a company iPhone, the user goes from "successful" in screen lock configuration profile to "not applicable", even though policy is directed at Windows10 devices.

Why is it that configuration profile works until a user signs into two different devices at the same time? The system account will show as successful, but user account "not applicable"

 

Azure configuration profile not applicable for user accounts logged into desktops and iPhones

Hi Chris,

I am Dave, I will help you with this.

I apologize, Community is just a consumer forum, due to the scope of your question (Azure AD) can you please post this question to our sister forum on Microsoft Q&A (The System Admins and IT Pro Forum)

Over there you will have access to a host of System Admins and Azure experts and will get a knowledgeable and quick answer to this question.

https://docs.microsoft.com/en-us/answers/index....

 

How to completely remove a user account from windows (local OR Azure AD) - Fixes M365 log in issues.

This is less of a question than a post to correctly explain how to remove a user's (local or Azure AD) profile and data from a PC.

-This does not delete/remove their Azure account.

-In the case of M365 log in issues (Teams, Edge, OneDrive, and so on), remove the account per the following directions and reload the account.

• Windows key + R
  
• Sysdm.cpl - enter
  
• Advanced Tab
  
• User Profiles – Settings
  
• Select profile – click delete