Now booking Q1 Intune migrations — talk to an engineer.

CyberSystem
← Back to Blog

Intune Administrative Templates and Group Policy Migration: Complete Guide

Learn how to migrate Group Policy Objects (GPOs) to Intune using administrative templates, Group Policy analytics, and the settings catalog for cloud-native endpoint management.

By Ali Alame•
intuneadministrative-templatesgroup-policygpomigrationsettings-catalogwindows

Migrating from Group Policy to Microsoft Intune enables cloud-native endpoint management while maintaining familiar policy configurations. Intune provides administrative templates and Group Policy analytics tools to help you migrate existing GPOs and configure settings using familiar Group Policy-like interfaces.

Understanding Administrative Templates in Intune

Administrative templates in Intune provide Group Policy-like settings for managing Windows and macOS devices. These templates are built into Intune and don't require downloading or custom configuration, making them ideal for migrating from on-premises Group Policy.

Key Features

  • Built-in Templates: No download required
  • Familiar Interface: Similar to Group Policy Editor
  • Settings Catalog: All settings in one place
  • Group Policy Analytics: Import and analyze existing GPOs
  • Migration Tools: Automated migration from GPOs

For an overview, see Configure ADMX settings using the settings catalog in Microsoft Intune.

Group Policy Analytics

Importing GPOs

Group Policy Analytics allows you to import existing GPOs and analyze them for migration to Intune.

Step 1: Export GPOs

From your Group Policy Management Console:

  1. Right-click the GPO
  2. Select Save report
  3. Save as HTML or XML

Step 2: Import to Intune

  1. Sign in to the Microsoft Intune admin center
  2. Navigate to Devices > Manage devices > Group Policy analytics
  3. Select Import
  4. Upload GPO backup files
  5. Select Import

Step 3: Review Analysis

After import, review:

  • Supported settings: Settings available in Intune
  • Deprecated settings: Settings no longer supported
  • Unsupported settings: Settings not available in Intune
  • MDM support: Settings with MDM support

For guidance, see Group Policy analytics.

Migrating GPOs to Settings Catalog

Step 1: Select GPOs to Migrate

  1. In Group Policy analytics, select GPOs to migrate
  2. Check Migrate checkbox
  3. Select Migrate button

Step 2: Review Settings

  1. Review Settings to migrate tab
  2. Select settings to include
  3. Review setting values
  4. Check for migration warnings

Important: Some settings may:

  • Have better configuration in Endpoint Security
  • Use alternate settings
  • Fail to migrate (shown in notifications)

Step 3: Create Settings Catalog Policy

  1. Review configuration values
  2. Enter profile name and description
  3. Assign scope tags (optional)
  4. Assign to groups
  5. Review and create

For detailed steps, see Create a Settings Catalog policy using your imported GPOs in Microsoft Intune.

Using Settings Catalog

Creating Settings Catalog Policies

Step 1: Access Settings Catalog

  1. Navigate to Devices > Manage devices > Configuration > Create
  2. Select Windows 10 and later
  3. Select Settings catalog
  4. Select Create

Step 2: Configure Settings

  1. Search: Search for specific settings
  2. Filter: Filter by category
  3. Add: Add settings to policy
  4. Configure: Set values for each setting

Available Categories:

  • Administrative Templates
  • Microsoft Edge
  • OneDrive
  • Office
  • Windows Update
  • And hundreds more

Step 3: Assign and Deploy

  1. Assign scope tags (optional)
  2. Assign to user or device groups
  3. Review and create

For guidance, see Use the settings catalog to configure settings on Windows and macOS devices.

Importing Custom ADMX Templates

Step 1: Prepare ADMX Files

  1. Obtain ADMX and ADML files
  2. Ensure files are compatible
  3. Note any dependencies

Step 2: Import to Intune

  1. Navigate to Devices > Manage devices > Configuration > Administrative templates
  2. Select Import
  3. Upload ADMX and ADML files
  4. Select Import

Note: Custom templates are available in Settings Catalog after import.

For details, see Import custom ADMX and ADML administrative templates into Microsoft Intune.

Migration Strategies

Strategy 1: Start Fresh (Recommended)

Approach:

  • Review existing GPOs
  • Identify essential settings
  • Create new Intune policies
  • Don't migrate everything

Benefits:

  • Cleaner configuration
  • Eliminates legacy policies
  • Better for cloud-native endpoints
  • Easier to maintain

Strategy 2: Migrate Selectively

Approach:

  • Use Group Policy Analytics
  • Identify supported settings
  • Migrate essential policies only
  • Test before broad deployment

Benefits:

  • Preserves important configurations
  • Validates settings
  • Gradual transition
  • Lower risk

Strategy 3: Hybrid Approach

Approach:

  • Start fresh for new policies
  • Migrate critical existing policies
  • Use both approaches as needed
  • Gradually phase out GPOs

Benefits:

  • Flexible transition
  • Preserves critical settings
  • Allows gradual migration
  • Reduces risk

For planning guidance, see High level planning guide to move to cloud-native endpoints.

Best Practices

1. Analyze Before Migrating

  • Use Group Policy Analytics
  • Review all GPOs
  • Identify deprecated settings
  • Document policy purposes

2. Start with Critical Policies

  • Migrate security policies first
  • Focus on essential settings
  • Test thoroughly
  • Expand gradually

3. Validate Settings

  • Test migrated policies
  • Verify settings apply correctly
  • Check for conflicts
  • Adjust as needed

4. Document Migration

  • Document migrated policies
  • Record any changes
  • Note unsupported settings
  • Maintain migration log

5. Clean Up

  • Remove unnecessary policies
  • Eliminate legacy settings
  • Simplify configuration
  • Optimize for cloud

Common Migration Scenarios

Scenario 1: Office Settings

Migration:

  • Import Office ADMX templates
  • Use Settings Catalog
  • Configure Office policies
  • Assign to user groups

Scenario 2: Microsoft Edge Settings

Migration:

  • Use built-in Edge settings
  • Configure via Settings Catalog
  • Migrate browser policies
  • Test compatibility

Scenario 3: Windows Security Settings

Migration:

  • Use Endpoint Security policies
  • Configure security baselines
  • Migrate security settings
  • Use specialized security profiles

Troubleshooting

Common Issues

  1. Settings Not Migrating

    • Check MDM support
    • Review unsupported settings
    • Use alternate settings
    • Configure manually if needed

  2. Settings Not Applying

    • Verify policy assignment
    • Check device check-in
    • Review policy conflicts
    • Validate setting compatibility

  3. Unexpected Behavior

    • Test in isolated environment
    • Review setting values
    • Check for conflicts
    • Adjust configuration

Additional Resources

Conclusion

Migrating from Group Policy to Intune enables cloud-native endpoint management while preserving familiar policy configurations. By following these best practices:

✅ Analyze GPOs before migrating
✅ Use Group Policy Analytics
✅ Start with critical policies
✅ Validate settings thoroughly
✅ Document migration process

You can successfully transition from on-premises Group Policy to cloud-based Intune management while maintaining security and functionality.

Remember: Not all Group Policy settings are applicable to cloud-native endpoints. Use Group Policy Analytics to identify supported settings and consider starting fresh for a cleaner, more maintainable configuration.