(137) Microsoft Intune - Config Refresh

Microsoft released this setting a few months ago with a config refresh policy.

What is Config Refresh?

Config Refresh helps improve security and compliance for Intune managed PCs. By default, MDM policy refreshes every eight hours. With Config Refresh, you can now configure policy refresh timing to be as short as 30 minutes or as long as 24 hours (that is, 1,440 minutes).

Config Refresh is designed to provide improved functionality that was available with Group Policy. Some of the key new features are:

• A reset operation to reset any settings you manage which use the Policy CSP

• Configuration options to allow reset of managed settings to take place as frequently as every 30 minutes

• Offline functionality, not requiring connectivity to an MDM server

• Ability to pause Config Refresh for troubleshooting purposes with automatic resume after 24 hours

How to deploy Config Refresh?

Navigate to Microsoft Intune portal (https://intune.microsoft.com/). Select Devices > Configuration > Create > New Policy > Platform: Windows 10 and later, Profile type: Settings Catalog. Then select Create.

Give your profile a name then under Configuration settings, select Add Setting then enter in: Config Refresh.

Select the required, and configured as required. Config refresh = Enabled

Refresh cadence = 30 (minutes)

Review your settings, then select Create.

How can I find my GUID?

Navigate to C:\ProgramData\Microsoft\DMClient, which you get the ID.

How can I check if it's applied?

By navigating to Registry Key, navigate to:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Enrollments\GUID\ConfigRefresh

Where on my device it is: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Enrollments\479A5097-3A7F-49EE-88EA-82B804591F93