Create a New Policy in Intune

  1. Sign into the Intune Admin Center (https://intune.microsoft.com/#home)
  2. In the left-hand column click “Endpoint Security”
  3. In the next column over click “Account protection”
  4. In the next section click “Create Policy”
  5. Create a profile: for Platform choose "Windows", for Profile choose "Local user group membership" then click the blue “Create” button near the lower left
  6. Basics: enter a Name and a Description for your policy then click Next
  7. Configuration settings: click Add to get a new line to fill out
  8. In the dropdown box for Local Group choose what groups are needed (eg Administrators)
  9. In the dropdown box for Group and User Action choose "Add (Update)"
  10. In the dropdown box for User Selection Type choose "Users/Groups"
  11. Click the link for Select Users/Groups, check the boxes for the desired users and/or groups, click Select, then Next
  12. Scope Tags: Leave as default, click Next
  13. Assignments:  Click into the box “Search by group name…”, scroll to or type the name of the desired group, click the group to select it and it will appear below, change the Target Type and Filter if needed, then click Next
  14. Review + Create:  Look over the settings.  You can go back to change anything if needed.  As long as everything is correct, click Save.
Print Article