nerdexam
Microsoft

MD-102 · Question #240

You have a hybrid deployment of Azure AD that contains 50 Windows 10 devices. All the devices are enrolled in Microsoft Intune. You discover that Group Policy settings override the settings…

The correct answer is C. From the Microsoft Intune admin center, create an Administrative Templates device profile. In hybrid Azure AD environments, Group Policy can conflict with and override Intune MDM policies by default. To reverse this precedence, you create an Administrative Templates (ADMX-backed) device configuration profile in the Intune admin center and enable the policy 'MDM wins…

Submitted by anna_se· Apr 18, 2026Manage and maintain devices

Question

You have a hybrid deployment of Azure AD that contains 50 Windows 10 devices. All the devices are enrolled in Microsoft Intune. You discover that Group Policy settings override the settings configured in Microsoft Intune policies. You need to ensure that the settings configured in Microsoft Intune override the Group Policy settings. What should you do?

Options

  • AFrom Group Policy Management Editor, configure the Computer Configuration settings in the
  • BFrom the Microsoft Intune admin center, create a custom device profile.
  • CFrom the Microsoft Intune admin center, create an Administrative Templates device profile.
  • DFrom Group Policy Management Editor, configure the User Configuration settings in the Default

How the community answered

(26 responses)
  • A
    15% (4)
  • B
    8% (2)
  • C
    73% (19)
  • D
    4% (1)

Explanation

In hybrid Azure AD environments, Group Policy can conflict with and override Intune MDM policies by default. To reverse this precedence, you create an Administrative Templates (ADMX-backed) device configuration profile in the Intune admin center and enable the policy 'MDM wins over Group Policy' (MDMWinsOverGP). This ADMX-backed MDM policy, when pushed to devices, forces Windows to apply MDM-configured settings over conflicting GPO settings. Custom device profiles and direct GPO edits do not provide this MDM-over-GPO precedence mechanism.

Topics

#Administrative Templates#Group Policy precedence#Intune device profiles#Windows configuration

Community Discussion

No community discussion yet for this question.

Full MD-102 Practice