This blogpost is a rewrite after Microsoft released the July update of Intune, this feature is native in the Windows 10 Endpoint Protection profile. See my original blogpost here.

For every Windows 10 build Microsoft has released we are getting more and more MDM settings available in the operation system next version is no exception. In this blog post I will show how to disable the Xbox services with Intune. The new CSP – SystemService will  apply to Windows 10 1803.

The System Service CSP allows us to configure the startup mode for the following services on Windows:

• Home Group Listener Service
• Home Group Provider Service
• Xbox Accessory Management Service
• Xbox Live Auth Manager Service
• Xbox Live Game Save Service
• Xbox Live Networking Service

It only applies to this version of Windows 10:

Create the profile in Intune:

1. Name: Windows 10 – Endpoint Protection – System Services Xbox
2. Platform: Windows 10 and later
3. Profile type: Endpoint Protection
4. Settings: Select Configure
5. Xbox services: Click
6. Xbox services:
   1. Xbox Accessory Management Service : Disabled Xbox Live Auth Manager Service : Disabled Xbox Live Game Save Service : Disabled

      Xbox Live Networking Service : Disabled

How does this looks like from the client side:

In the Windows 10 MDM Advanced Diagnostic Report we can see the default value before the new created profile applies to the devices

After the profile are successfully assigned to the device we can see the Xbox services is set to Disabled

In the Windows 10 MDM Advanced Diagnostic Report we can see the settings from the profile applies to the devices

At this moment the value set on the devices is now showed correctly in the Advanced Diagnostic Report

When the Xbox service is disabled the end user cannot sign in to the Xbox service

Read more at:

Policy CSP – SystemServices