Each template is a pattern with example values. Open one in Build, then change, add or remove any part.
Policies and profiles5
Configuration profile
Settings catalog and template profiles, one per purpose and ring.
Pattern: Platform - Policy type - Purpose - Ring
WIN-CONF-EdgeBaseline-PRD
Policy or profile · 25 of 64 characters
Compliance policy
Versioned, so a stricter policy can run next to the one it replaces.
Pattern: Platform - Policy type - Purpose - Version
WIN-COMP-CorporateDevices-v1
Policy or profile · 28 of 64 characters
Profile by assignment
Says whether the profile targets users or devices.
Pattern: Platform - Object - Policy type - Purpose - Ring
WIN-USR-CONF-OneDriveKnownFolderMove-PRD
Policy or profile · 40 of 64 characters
App protection policy
For personal phones and tablets that are not enrolled.
Pattern: Scope - Platform - Policy type - Purpose
BYOD-IOS-APP-OutlookProtection
Policy or profile · 30 of 64 characters
Profile with a customer prefix
For MSPs and multi-tenant work: the customer code comes first.
Pattern: Prefix - Platform - Policy type - Purpose - Ring
Contoso-WIN-WIFI-CorporateWifi-PRD
Policy or profile · 34 of 64 characters
Endpoint security4
Disk encryption
BitLocker or FileVault policy under Endpoint security.
Pattern: Platform - Policy type - Purpose - Ring
WIN-SEC-BitLocker-PRD
Policy or profile · 21 of 64 characters
Attack surface reduction
Rolled out ring by ring, starting with a pilot.
Pattern: Platform - Policy type - Purpose - Ring
WIN-ASR-BlockOfficeMacros-PILOT
Policy or profile · 31 of 64 characters
Antivirus
Microsoft Defender Antivirus settings, versioned.
Pattern: Platform - Policy type - Purpose - Version
WIN-AV-DefenderBaseline-v2
Policy or profile · 26 of 64 characters
Firewall
Firewall profiles and rules.
Pattern: Platform - Policy type - Purpose - Ring
WIN-FW-DomainProfile-PRD
Policy or profile · 24 of 64 characters
Updates, apps and scripts4
Update ring
One policy per deployment ring.
Pattern: Platform - Policy type - Purpose - Ring
WIN-UPD-QualityUpdates-PILOT
Policy or profile · 28 of 64 characters
Feature update
Names the Windows release the policy holds devices on.
Pattern: Platform - Policy type - Purpose - Version - Ring
WIN-UPD-Windows11-24h2-PRD
Policy or profile · 26 of 64 characters
Remediation
Detection and remediation script pair.
Pattern: Platform - Policy type - Purpose - Version
WIN-REM-ClearTeamsCache-v1
Policy or profile · 26 of 64 characters
Platform script
PowerShell or shell script that runs once per device.
Pattern: Platform - Policy type - Purpose - Version
MAC-SCRIPT-InstallRosetta-v1
Policy or profile · 28 of 64 characters
Enrollment3
Autopilot deployment profile
Says how the device joins and who drives the setup.
Pattern: Platform - Policy type - Purpose
WIN-AP-UserDrivenEntraJoin
Policy or profile · 26 of 64 characters
Enrollment Status Page
One page per device group that needs different blocking apps.
Pattern: Platform - Policy type - Purpose
WIN-ESP-CorporateDevices
Policy or profile · 24 of 64 characters
Kiosk and shared devices
The scope comes first, so kiosk policies sort together.
Pattern: Scope - Platform - Policy type - Purpose - Ring
KIOSK-WIN-CONF-AssignedAccess-PRD
Policy or profile · 33 of 64 characters
Identity and groups4
Conditional Access policy
Numbered, so policies sort in the order you review them.
Pattern: Policy type - Counter - Scope - Purpose
CA-001-GBL-RequireMfaAllUsers
Policy or profile · 29 of 64 characters
Device group
Entra group of devices, with the membership type at the end.
Pattern: Object - Platform - Purpose - Suffix
GRP-WIN-AutopilotDevices-Dynamic
Entra group · 32 of 256 characters
App assignment group
One group per app and install intent.
Pattern: Object - Platform - Purpose - Suffix
APP-WIN-AdobeReader-Required
Entra group · 28 of 256 characters
Department user group
Entra group of users, by department.
Pattern: Object - Department - Purpose
GRP-FIN-PowerBiProUsers
Entra group · 23 of 256 characters
Device names2
Device name
Short enough for the 15-character limit, with a running number.
Pattern: Scope - Platform - Counter
CORP-WIN-0001
Device name · 13 of 15 characters
Device name by site
A site code first, for example an airport or city code.
Pattern: Prefix - Platform - Counter
BER-WIN-001
Device name · 11 of 15 characters