u/EstimatedProphet222

Specifically, this setting from Windows Catalog>Administrative Templates>Control Panel:

Prohibit access to Control Panel and PC settings (User)

IT will frequently need temporary access to the settings while logged in as the restricted user for a number of reasons. The current method of removing the restriction is removing the user from a group that applies it. Tons of time wasted waiting for the policy to be removed after the group change and babysitting after troubleshooting the PC and reverting the group change babysitting the PC until the restriction is re-applied.

Even though it is a user based restriction, launching a powershell session as a unrestricted admin & launching settings from powershell (start ms-settings:) fails. Is there a registry key or other way to temporarily remove this? It would save a TON of time if there were a registry change that we could instantly push via NinjaOne to remove the restriction, and then instantly restore it when done.

Am I crazy in thinking that there MUST be a better way?

Not that I am complaining AT ALL, but in the past 3 hours, I have now twice seen >200 machines sync'd at the same time. Around 3PM today, I noticed that almost every PC had sync'd with Intune at 2:25/26 and said to myself "wow - that's weird". It's now just after 5, and pretty much every PC now shows a sync at 4:45/46.

Edit: Had another "mass check in attempt" at 7:14/15

I remember reading something recently about the IME changing the way it communicates changes and is supposed to result in much faster syncing. Am I just seeing a random coincidence or has this new sync behavior already been implemented? Tenant on NA 0102 running Service Release 2603.