For the most part, you should be able to add nearly every single device setting via Intune from standard device config profiles to ADMX to CSP. The Intune team is adding new capabilities all the time. I did come across two settings that I really like to have enabled in my lab that still isn’t available from an out of box device profile or CSP (or at least I couldn’t figure out how to do it via CSP). So as of this post, the 2 -must have- settings in my lab are RDP and ping. A real-world application of this is a mixed management environment. An IT shop that is slowly shifting to a modern workplace is likely to be piloting company owned devices which connect to the corporate network but are solely managed by Intune but the rest of the devices are managed by legacy on-prem AD and may/may not be co-managed with ConfigMgr + Intune.
So for the purpose of this post, I needed to quickly enable these settings for a VM that was “company owned”, always connected to the corp network during work hours, and needs to be accessed by helpdesk for some sort of task. I can’t tell you how many times in my helpdesk days that I’d remote to somebody’s PC during their lunchbreak/meeting/poop time. It’s a real need.
Pre-requisite: A device group to deploy a powershell script.
I created mine as a dynamic group with some pretty loose settings. It needs to be running Windows and it needs to be company owned. I’ll elaborate via a snip
Figure 1 I'm in AAD - Groups blade
After some time, you should see some devices show up in the members tab.