In Microsoft Intune there is some new settings for configure Windows Settings app this feature is added in Windows 10, version 1703. Allows IT Admins to either prevent specific pages in the System Settings app from being visible or accessible.

This profile settings was first introduced in Intune 1704 – and in the new Intune 1706 with a more settings and sub settings.

• Settings app
• System
  • Power and sleep settings modification (desktop only)
• Devices
• Network and Internet
• Personalization
• Apps
• Accounts
• Time and Language
  • Region settings modification (desktop only)
  • Language settings modification (desktop only)
• Gaming
• Ease of Access
• Privacy
• Update and Security

The default value for this setting is an empty string, which is interpreted as show everything.

The policy is supported on the following SKU :

Home: No Pro: Yes Business: Yes Enterprise: Yes Education: Yes Mobile: Yes Mobile Enterprise: Yes IoT Core: No

Can be set using Exchange Active Sync (EAS): No

How to create a Device Configuration profile to configure the settings app.

Login to Intune in Azure : https://portal.azure.com

Go to Intune –

Click on Profiles

Create profile

Give the profile a Name

Select Platform – Windows 10 and Later

Profile Type – Device Restriction

Settings Configure –  Control Panel and Settings

Block everything except Settings app and Accounts

Assign the profil to a group of users or devices

When the device is sync with Intune at the next schedule the profile will take effect,

And the user can only see the Account tab in settings app

When clicking Accounts the user get access to the Account tab and have access to everything except Access Work or School

Here is another example where only Accounts and Update & security is enabled

Then the user experience is like this

You need to test and try combination in the profile settings so you get the result you what for your users.