Just over a week ago, the ability to import ADMX in Intune was added. At the moment it is still in Public preview, this means that it is still under development and things may change. With this feature, it is possible to use custom and third party ADMX files to add Group Policy settings to Intune. Instead of configuring Custom CSP, you can simply import an ADMX file and assign it. This makes it much easier and less error-sensitive to configure such settings.
How to import an ADMX in Intune
First you will need an ADMX and ADML file to import. In this example I will use Firefox as an example. So I will first download the needed files from the Firefox which you can find here. After you download and extract the file you will see several files. In the root you will see two ADMX files Firefox and Mozilla (1). In addition, there are several language folders (2) containing the ADML files.
Now that we have the necessary files we go to the MEM admin center. Unlike what you may be used to, you don’t have to make a platform selection. Select “Devices” (1) -> “Configuration profiles” (2) to get to the appropriate screen. Here you will see at the top next to profiles an extra tab called import ADMX (3) just click on this tab.
Now the ADMX profiles page appears. Here you see all imported ADMX files (1) and you can add new ones by pressing “+Import” (2). At this time, no profiles are present and we press “+Import” (2) button to add the Firefox policies.
To import the group policy settings you must follow the correct order. The Firefox ADMX has references to the Mozilla ADMX. Therefore you need to import the Mozilla ADMX first and then the Firefox ADMX. Select the Mozilla.admx (1) and then the Mozilla.adml (2) for the corresponding language you want to use. Currently it is not possible to add multiple ADML files. Press “Next” (3) to continue.
On the Review + Create page, press the Create button to complete the import.
The new profile appears in the overview. Now we follow the above steps again to add the firefox policy.
Wait for the status of both profiles to change to “Available” (1). Please note the page does not refresh automatically. You have to press the refresh button (2) manually.
Now that the profiles are available we are going to assign them. You do this by selecting “profiles” (1) at the top of the page and then pressing the “+Create Profile” (2) button.
Under platform select “Windows 10 and later” and under profile type select “Templates”. Search for the template “Imported Administrative templates (Preview)” and press “Create”.
Enter a name for the configuration profile and press “Next”.
You can now simply configure the settings that are in the ADMX that you want. For example: Enable autoupdate. After you have configured the settings press “Next”.
Configure the scope tags you want to use and press “Next”
Assign the configuration profile to a group and apply filters if needed. Press “Next” to continue.
Check the settings and press create to apply the configuration.
This is how easy it works to import and apply custom and third party ADMX files to Intune managed devices. It’s quite an improvement in complexity over custom CSP.