Learn How to Pause Config Refresh in Intune step by step
This tutorial will show you how to temporarily stop Config Refresh in Intune. When you stop Config Refresh on a Windows device, Intune will reapply the policies that were previously applied without the need for the device to check in or restart. Config Refresh enables you to regularly update the MDM policy configurations on your devices to ensure they remain secure and configured as desired.
While enforcing Config Refresh, the remote Windows device may be either connected or disconnected. The device won't verify the most recent policies from the Intune service but will enforce the policies received during the previous check-in.
The Windows 11 Insiders build was the initial launch of the Config Refresh feature. Soon after, it became accessible for all versions of Windows 11 (21H2, 22H2). Pause config refresh is only supported by devices running Windows 11. Windows 10 devices are not compatible.
What Does Config Refresh Entail?
The Intune Config Refresh feature is a strong tool that helps prevent the negative effects of intentional or inadvertent modifications by reapplying policy settings that were previously received. We can apply the policies again on a regular schedule. Here are the main points:
A set rhythm can be established for updating settings catalog configurations. By activating this option, Intune will periodically update policies on devices, with a minimum time interval of 30 minutes. This guarantees that policy modifications are uniformly enforced on all our devices under management. The minimum time for the interval can be adjusted from 30 to 1440 minutes.
It is possible to stop; there is a method to stop using a remote command. If a particular device requires modifications, we can temporarily disable the function for a set period of 0-1440 minutes.
Difference Between Policy and Configuration Updates
Let's differentiate between policy refresh intervals and config refresh. The frequency of policy refresh intervals determines how frequently Intune prompts the device to sync with the Intune service. The default policy refresh interval for Windows devices enrolled in Intune is 8 hours. You have the option to manually synchronize policies on a device in order to connect with Intune.
While using Config Refresh, you can remotely pause a specific action. If an administrator is required to modify or perform remedial actions on a device for diagnostic or upkeep purposes, they can initiate the Pause function in Intune for a set duration. After the time limit ends, the configurations are once again activated on that particular device.
Utilize the Settings Catalog for Setting Up Config Refresh and Determining Refresh Cadence
Microsoft recommends using the Windows settings catalog to allow Windows devices to reapply policy settings on a different schedule instead of checking in to Intune every 90 minutes (or every 30 minutes if desired). The refresh cycle can be modified by using the Config refresh and Refresh Cadence settings in the Settings Catalog or ConfigRefresh CSP settings in Intune.
We will establish a policy in Intune to set up the frequency of updates and configure the configuration refresh by using the settings catalog.
Log into the Microsoft Intune administrator portal.
Navigate to Devices > Windows > Configuration.
Choose the option Create > New Policy.
Select Windows 10 and above for Platform and Settings Catalog for Profile Type. Choose the option to Create.
Input the policy name and description on the Basics page. Press the Next button.
Click on Add Settings in the Settings Catalog section of the Configuration Settings. In the Settings picker window, enter "Config Refresh" in the search box and then press the Search button.
Choose the Config Refresh category from the search results.
Choose Config Refresh and Refresh Cadence settings and then close the settings picker window.
Set up the following two configurations:
Update Configuration: Activate this option.
Cadence of Refresh: This option establishes the duration of time ConfigRefresh should be halted.
The default setting is 0. Choose a time frame ranging from 0 to 1440 minutes (24 hours).
Press the Next button.
Utilize the Settings Catalog for setting up Config Refresh and Refresh Cadence.
Identify the Entra ID groups to assign the policy in the Assignments tab. Our suggestion is to start by implementing the profile with a small number of test groups before rolling it out to additional groups once the testing is proven successful. Choose the following option.
Implement the Pause Config Refresh policy.
Set the Pause Config Refresh policy
At last, go to the Review+Create tab to review all the settings you have set up for enforcing Config Refresh with Intune. Press the Create button.
The recently established configuration profile is visible in the list of configuration profiles in Intune.
Using Pause Config Refresh in Intune: A Guide to its Application
Follow these steps to start the process of Pausing Config Refresh in the Intune admin center:
Log in to the Microsoft Intune admin center in the role of an administrator.
Choose Devices, then select All Devices.
Choose Pause Config Refresh on one of the Windows devices you are managing.
Stop updating configuration settings in Intune.
Halt Configuration Update in Intune
Indicate how many minutes you want to pause Config Refresh in the Time period for Pausing Config Refresh. In the example below, we have set a time period of 45 minutes. The longest duration is 1440 minutes, which is equivalent to 24 hours. Choose Pause.
Stop automatic updating in Intune.
The Intune portal shows a message saying "Config refresh pause initiated" in the top right corner. Moreover, the device overview page displays the status message: "Config refresh pending, paused..."
Halt Configuration Update in Intune
Config Refresh is currently pending and on hold.
After a couple of minutes, the device summary page displays the status as "Pause configuration refresh: Done."
This confirms that the remote device has successfully carried out the action to stop the configuration refresh.
Halt Configuration Update in Intune
Config Refresh Pause Finished
If you stop a device without Config Refresh enabled, it won't make any changes. If you want to resume Config Refresh after pausing it, select Pause again for 0 minutes to resume Config Refresh enforcement.
