Policy Conflict Analyzer
Browser-onlyWhen several policies configure the same setting, the outcome depends on the policy types involved. Paste your policies and see every conflict — and which policy wins.
Runs entirely in your browser.
The values you enter are processed locally and are never sent to IntuneBench.
You can use this tool offline once the page has loaded.
Each policy:
name, kind (ConfigurationProfile, CompliancePolicy,
AppProtectionPolicy, SettingsCatalog, EndpointSecurity, CustomOmaUri) and
settings as a map or an array with optional scope.
How it works
Paste an array of policies, each with a name, a kind and its settings. The analyzer matches settings by name across policies and, where a setting has different values, reports how Intune resolves it. This mirrors the documented conflict behaviour rather than guessing.
How conflicts resolve
- Compliance outranks configuration. A compliance policy setting takes precedence over the same setting in a configuration profile.
- Compliance vs compliance. The most restrictive compliance value applies.
- App protection policies. Conflicts resolve to the most restrictive value, except numeric fields such as PIN attempts.
- Configuration vs configuration. Intune reports a conflict and the setting is not applied until you resolve it.
- User vs device scope. For a setting at both scopes, user scope takes precedence.
- Custom OMA-URI or Apple payloads. Intune does not evaluate the payload, so the outcome is unpredictable and must be verified manually.
Supported scenarios
- Checking a new policy against an existing baseline before you assign it.
- Explaining why a setting is not applying across overlapping policies.
- Documenting precedence in a change record.
Common problems
- Conflicts only appear when overlapping policies are analysed together, so paste every policy that targets the same devices or users.
- Unassigned policies are excluded from the analysis because they never apply.
- Where the winner is "the most restrictive value", confirm which value is more restrictive for that specific setting.
Related
Configuration Linter · Policy Diff · Assignment Analyzer · All tools