# Policy Settings Overview
## What Is This Page?
The **Policy Settings Overview** page unpacks every configuration policy in your Intune tenant into its individual settings and shows them all in a single flat table. Where the [Policy Overview](/intune-assistant/policies/policy-overview.md) answers "which policies exist?", this page answers "what is each policy actually doing?" — right down to the setting name, the configured value, the source policy, the platform, and whether the policy is currently assigned.
The page also does something the Intune portal cannot do on its own: it automatically cross-references all settings across all policies and flags **duplicate settings** (the same setting configured to the same value in multiple policies targeting the same groups) and **conflicting settings** (the same setting configured to *different* values in policies that overlap in their assignment targets). This makes it the primary tool for configuration hygiene and security auditing.
***
## Why Would You Use This?
* You want to understand your device configuration at the individual setting level, not just the policy level
* You need to find settings that are configured in more than one place — common after tenant growth, migrations, or team changes over time
* You need to detect and resolve **conflicting settings** before they cause unpredictable device behaviour
* You are migrating from legacy Device Configuration profiles or ADMX Group Policy to the modern Settings Catalog and need to see exactly which settings are already covered
* You need to audit the complete configuration state of a tenant for a security review, ISO 27001 assessment, or compliance framework
* You want a structured export of all settings including values, sources, platforms, and conflict status
***
## How Data Is Loaded
This page does **not** load everything in a single request. Settings are fetched from three separate Intune sources in sequence. A **progress bar** with a step indicator is shown while loading:
| Step | Label | What Is Fetched |
| ------ | ------------------------ | ------------------------------------------------------------------------------------------ |
| 1 of 3 | **Settings Catalog** | All settings inside Settings Catalog policies |
| 2 of 3 | **Device Configuration** | All settings inside Device Configuration profiles, including OMA-URI custom settings |
| 3 of 3 | **Group Policy** | All settings from Administrative Templates and Group Policy Analytics ingested into Intune |
The progress bar shows the current status of each step:
* `✓` — completed
* `⟳` — in progress (currently fetching)
* `○` — waiting
A step counter shows `1/3`, `2/3`, `3/3` as each source completes.
Once all three steps finish, **duplicate and conflict detection runs automatically** across the full merged dataset before the table is rendered.
> **Cancel:** A **Cancel** button appears during loading. Clicking it stops all pending requests and shows a retry card. Any steps that had already completed are discarded — clicking Retry starts all three steps fresh.
***
## Understanding the Table
Each row in the table is a single **setting** from a single policy. The columns are:
| Column | What It Shows |
| ------------------ | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| **Policy Name** | The name of the policy this setting belongs to. Below the policy name, a coloured **source badge** shows the origin (see Source Badges below). If the setting has been flagged as a duplicate or conflict, an additional **clickable badge** appears here |
| **Setting Name** | The display name of the setting. For Device Configuration OMA-URI custom settings, the OMA-URI path is shown in smaller muted text below the setting name. If the setting ID was used as the name (no display name resolved), the ID is shown |
| **Setting Value** | The configured value for this setting. Values longer than 50 characters are truncated — hover to read the full value. For settings flagged as **Conflict**, the value is highlighted in **red** to draw attention |
| **Platform** | The platform string of the parent policy (e.g., `windows10`, `iOS`, `Android`) |
| **Assigned** | Whether the parent policy has at least one assignment. Shows a clickable green **Assigned** badge (opens the Assignments dialog) or a grey **Not Assigned** badge |
| **Child Settings** | For Settings Catalog settings that have sub-options, shows a `N child settings` expandable link. Click to expand the sub-settings inline. Automatically expands and highlights matching children in amber when a search term matches |
***
## Source Badges
Every row has a source badge in the Policy Name cell indicating which Intune engine the setting came from:
| Colour | Source | Description |
| ------ | -------------------- | ---------------------------------------------------------------------------------- |
| Blue | **Settings Catalog** | Modern policy settings — the recommended approach for new configurations |
| Purple | **Device Config** | Legacy Device Configuration profiles — older approach, still widely used |
| Green | **Group Policy** | ADMX-based Administrative Templates or Group Policy Analytics ingested into Intune |
***
## Duplicate and Conflict Detection
After all three sources are loaded, the page runs an automatic analysis across the full dataset. Every setting is checked against every other setting of the same name, looking for cases where:
1. The same setting appears in multiple policies
2. Those policies have **overlapping assignment targets** — meaning at least one group (or built-in target) is shared between them
Only settings in policies that actually target the same devices or users are compared. A setting that appears in two policies assigned to completely different groups is **not** flagged.
### Duplicate (yellow badge)
A **Duplicate** means the same setting is configured to the **same value** in two or more policies that overlap in their assignments.
* This is not necessarily causing harm, but it is unnecessary and can create confusion
* It commonly appears during migrations when a new Settings Catalog policy is created to replace an old Device Configuration profile but the old profile has not yet been removed
* Click the yellow **Duplicate** badge to open the Duplicate Details dialog
### Conflict (red badge)
A **Conflict** means the same setting is configured to **different values** in two or more policies that overlap in their assignments.
* This means Intune is sending contradictory instructions to the same device
* The device will apply one value or the other depending on policy conflict resolution precedence — which may not be the intended outcome
* Conflicts should be investigated and resolved: either consolidate into one policy or ensure the conflicting policies target different groups
* Click the red **Conflict** badge to open the Conflict Details dialog
> ⚠️ **Conflicts represent a real configuration risk.** A device receiving conflicting settings may end up in an indeterminate state that does not match either policy's intent. Treat conflict badges as action items.
***
## The Duplicate / Conflict Details Dialog
Clicking a **Duplicate** or **Conflict** badge opens a detail dialog. The dialog is structured into two sections:
### This Policy
Shows a highlighted card for the current row's policy with:
* Policy name
* Configured setting value
The card is highlighted in **yellow** for duplicates and **red** for conflicts.
### Conflicting / Duplicate in N Other Policies
Lists every other policy that has the same setting with overlapping assignments. Each entry shows:
* Policy name
* Source badge (Settings Catalog / Device Config / Group Policy)
* The setting value configured in that policy
* A **red triangle icon** if the value differs from the current row's value
This gives you exactly what you need to decide which policy to keep and which to clean up or merge.
***
## The Assignments Dialog
When a row shows a green **Assigned** badge in the Assigned column, clicking it opens the **Assignments dialog** for that policy.
The dialog shows:
* A section for **Group Assignments** — each assigned group is shown with its display name (fetched live), the GUID below it in small monospace text, and a **View Group** button
* A section for **Other Assignments** — built-in targets (All Users, All Devices) shown as their raw odata type string
* The total assignment count in the dialog header
The display names of groups are loaded asynchronously while the dialog is open — a shimmer placeholder appears until the name resolves. Clicking **View Group** on any entry closes the Assignments dialog and opens the **Group Details dialog** for that group.
***
## Filters Panel
The **Filters** header is a clickable toggle. Click it to expand or collapse the filter controls.
When collapsed, any **active filters are shown as chips** in a summary row beneath the header — so you always know what is filtering the table even with the panel closed. The header also shows a badge like `2 active` when filters are set.
| Filter | Options | What It Does |
| -------------- | --------------------------------------------- | ----------------------------------------------------------------------------- |
| **Source** | Settings Catalog, Device Config, Group Policy | Show settings from one or more specific policy engines |
| **Platform** | Values from your tenant | Limit to a specific device platform |
| **Status** | OK, Duplicate, Conflict | Show only clean settings, only duplicates, only conflicts, or any combination |
| **Assignment** | Assigned, Not Assigned | Show only settings from assigned policies, or only from unassigned ones |
When filters are active, a count shows: `Showing X of Y settings`.
Click **Clear All** to reset everything at once.
***
## Clickable Stats Bar
Below the filters panel, a row of **clickable stat badges** is shown. Each badge both displays a count and acts as a shortcut to toggle a filter:
| Badge | Click Action |
| ---------------------- | ---------------------------------------------------------- |
| **N total settings** | Clears all filters — shows the complete unfiltered dataset |
| **N Settings Catalog** | Toggles the Settings Catalog source filter on/off |
| **N Device Config** | Toggles the Device Config source filter on/off |
| **N Group Policy** | Toggles the Group Policy source filter on/off |
| **N duplicates** | Toggles the Duplicate status filter on/off |
| **N conflicts** | Toggles the Conflict status filter on/off |
An active filter badge shows a **coloured ring** around it. Clicking again removes the filter. If both duplicates and conflicts are zero, those badges are not shown.
When any filter is active, a text suffix shows: `— showing X of Y`.
> 📸 *\[Screenshot placeholder: Stats bar showing six badges in a row: a dark total badge, blue Settings Catalog, purple Device Config, green Group Policy, yellow duplicates, and a red conflicts badge with a ring indicating it is currently active]*
***
## Search
A search box is available at the top of the table. It searches simultaneously across:
* Setting name
* Policy name
* Setting value
Results update live as you type.
**Child settings aware:** When a search term matches a child sub-setting (not the parent setting name), the parent row automatically expands its child settings panel and highlights the matching children in **amber**. The match count is shown next to the expand link: `3 child settings (1 match)`.
***
## Exporting the Data
After data is loaded, an **Export** button appears in the top-right area.
**Available formats:** CSV, PDF, HTML
**Filename:** `policy-settings` (with the appropriate extension)
The export respects all active filters — only the rows currently visible in the table are included.
The export includes one row per setting with these columns:
| Export Column | Content |
| ------------- | ---------------------------------------------------------------------- |
| Policy Name | Name of the parent policy |
| Setting Name | Display name of the setting |
| Setting Value | Configured value |
| OMA-URI | The OMA-URI path (Device Config custom settings only, blank otherwise) |
| Source | `catalog`, `deviceconfig`, or `grouppolicy` |
| Platform | Platform string |
| Assigned | `true` or `false` |
| Status | `ok`, `duplicate`, or `conflict` |
The export stats summary includes:
* Total setting count
* Settings Catalog count
* Device Config count
* Group Policy count
* Duplicate count
* Conflict count
***
## Common Use Cases
**Are there any conflicting settings in my tenant?**\
Check the stats bar immediately after loading. If the red **Conflicts** badge shows any number greater than zero, click it to jump straight to a filtered view showing only conflicting rows. Click each Conflict badge to understand which policies are involved and what values they are each setting.
**I am migrating from Device Configuration to Settings Catalog — what is already covered?**\
Enable both **Settings Catalog** and **Device Config** source filters, then set **Status** to `Duplicate`. Every row that appears is a setting that exists in both systems with the same value — those Device Config settings are safe to remove once you have confirmed the Settings Catalog policy is assigned correctly.
**Full audit of all device configuration settings**\
Load the page with no filters active and click **Export → CSV**. This produces a complete, line-by-line manifest of every setting configured across your entire tenant.
**A device has a setting applied that I cannot explain**\
Search for the setting name in the search box. All policies that configure that setting will appear. Check the source and the Assigned badge to understand which one is reaching the device.
**Which ADMX / Group Policy settings have been imported into Intune?**\
Set the **Source** filter to `Group Policy`.
**Check whether an unassigned policy contains any settings worth keeping**\
Set the **Assignment** filter to `Not Assigned`. Review the settings list — if the policy contains valuable settings, assign it or merge them into an existing active policy before deleting it.
**Compare Windows and iOS configuration**\
Set **Platform** to `Windows10` first, export the result. Then reset and set **Platform** to `iOS`, export again. You now have a per-platform configuration manifest.
***
## Related Pages
* [Intune Policy Overview](/intune-assistant/policies/policy-overview.md) — see the policies these settings belong to, and manage them in bulk
* [All Assignments](/intune-assistant/assignments/all-assignments.md) — see which groups each policy is assigned to
* [Group Assignments](/intune-assistant/assignments/group-assignments.md) — see all configuration policies assigned to a specific group
---
# Agent Instructions: Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.
Perform an HTTP GET request on the current page URL with the `ask` query parameter:
```
GET https://docs.intuneassistant.cloud/intune-assistant/policies/policy-settings-overview.md?ask=
```
The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.
Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.