Convert Windows 10 CSP to OMA-URI for Intune Custom Policies

Let’s understand the structure of Windows 10 CSPs in some simple steps. When you create Intune custom policies (Configuration Profile), you need to find out the correct OMA-URI details. How to convert Windows 10 CSP to OMA-URI for Intune Custom Policies.

Examples

Let’s take two examples to understand the OMA-URL for Intune custom policy.

• Disable UX – ./Device/Vendor/MSFT/Policy/Config/Update/SetDisableUXWUAccess
• WUfB Rollback – ./Vendor/MSFT/Update/Rollback/FeatureUpdate

User Vs Device Windows 10 CSP Policy Scope

Let’s understand the scope of Windows 10 CSP policy. There are two types of CSP policy scopes!

• Policy scope is the level at which a policy can be configured.
• Device Scope – Windows 10 CSP policies can only be configured at the device level.
  • Applicable whether the user is logged in or not.
    • Example 1 – ./Device/Vendor/MSFT/Policy/Config/AreaName/PolicyName
      • Both the above and below structures are the same. You can use either for device-level configuration.
    • Example 2 – ./Vendor/MSFT/Policy/Config/AreaName/PolicyName
• User Scope -Windows 10 CSP policies can be configured at the user level.
  • Applicable only when the user is logged in.
    • Example 1 – ./User/Vendor/MSFT/Policy/Config/AreaName/PolicyName

NOTE! – Most of the CSP policies have a device-based scope as per my analysis.

Scope Defined for OMA-URI for Intune Policy: Vendor related policies & MSFT – Microsoft product related policy:

• Disable UX – ./Device/Vendor/MSFT/
• WUfB Rollback – ./Vendor/MSFT/

Config Vs Update

Let’s understand the difference between Config Vs Update sections in the above example.

• Config
  • Policy/Config – Node for grouping all policies configured by one source. In the above example, you are going to configure “Update” related policies.
    • Example – ./Device/Vendor/MSFT/Policy/Config/
  • Policy/Config/AreaName – The area group that can be configured by a single technology for a single provider. In the following AreaName is Update.
    • Example – ./Device/Vendor/MSFT/Policy/Config/Update/

• Update – The root node of Windows 10 CSP.
  • ./Vendor/MSFT/Update
    • /Rollback/FeatureUpdate

Resources

• Update CSP – https://docs.microsoft.com/en-us/windows/client-management/mdm/update-csp
• Policy CSP – https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-configuration-service-provider
• Uninstall Windows 10 Feature Update Using Intune Policies – https://howtomanagedevices.com/intune/2319/uninstall-windows-10-feature-update/