Microsoft Surface Hub 2 SmCamera - Manual (Page 244)

Manage Surface Hub with an MDM provider
Article • 04/19/2023 • Applies to: Surface Hub 2S, Surface Hub
Surface Hub allows IT administrators to manage settings and policies using a mobile device management (MDM) provider such as
Microsoft Intune. Surface Hub has a built-in management component to communicate with the management server. There is no need to
install additional clients on the device.
To enroll, see Enroll Surface Hub into MDM management
The foundational building block of policy settings management in Intune and other MDM providers is the XML-based Open Mobile
Alliance-Device Management (OMA-DM) protocol. Windows implements OMA-DM XML via one of many available Configuration service
providers (CSPs) with names like AccountManagement CSP, DeviceStatus CSP, WiFi-CSP, and so on. For a complete list, refer to
CSPs
supported in Microsoft Surface Hub .
Microsoft Intune and other MDM providers use CSPs to deliver a UI that enables you to configure policy settings within Configuration
profiles. Intune uses the Surface Hub CSP for its built-in template —
Device restrictions (Windows 10 Team) — letting you configure basic
settings such as preventing Surface Hub from "waking up" whenever anyone moves nearby within its proximity range. To manage Hub
settings and features outside of Intune's built-in profile, you'll need to use a custom profile, as
shown below .
To summarize, options to configure and manage policy settings within Intune include the following:
Create a Device restriction profile. Use Intune's built-in Surface Hub template and configure settings directly in the Intune UI. See
Create device restriction profile .
Create a Device configuration profile. Select a template focused on a specific feature or technology such as Microsoft Defender or
security certificates. See Create Device configuration profile .
Create a Custom configuration profile. Extend your scope of management using an OMA Uniform Resource Identifier (OMA URI)
from any of the CSPs supported in Microsoft Surface Hub . See Create custom configuration profile .
1. Sign in to Microsoft Intune admin center , select Devices > Configuration profiles > + Create profile .
2. Under Platform , select Windows 10 and later >
3. Under Profile type, select Templates and then select Device restrictions (Windows 10 Team)
4. Select Create , add a name and then select Next.
5. You can now browse and choose from preset device restriction settings for Surface Hub across the following categories: Apps and
experience, Azure operational insights, Maintenance, Session, and Wireless projection. The example shown in the following figure
specifies a 4-hour maintenance window and a 15 minute timeout for screen, sleep and session resume.
Manage Surface Hub settings with Intune
７ Note
Profiles should be assigned to device groups containing the enrolled Surface Hub devices.
Create Device restriction profile