In this post (which I will try to update continually), the most important registry and folder location related to Intune and Intune actions will be mentioned. This way everyone can easily refer to this post to find relevant information about the above.
Registry Paths
| Win32 Apps | HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\IntuneManagementExtension\Win32Apps |
| Remediation Scripts | HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\IntuneManagementExtension\SideCarPolicies\Scripts\Execution |
| Enrollment Info | HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Enrollments |
| Powershell Scripts | HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\IntuneManagementExtension\Policies |
| Apps info – 32 bit | HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall |
| Apps info – 64 bit | HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall |
| Defender for Endpoint registry location | HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Advanced Threat Protection |
| senseGuid Location | HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Advanced Threat Protection -> senseGuid |
| Telemetry Location | HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DataCollection |
| Autopilot Information | HKEY_LOCAL_MACHINE\SOFTWARE\Microsft\Provisioning\Diagnostics\Autopilot |
Folder Paths
| Intune Logs | C:\ProgramData\Microsoft\IntuneManagementExtension\Logs |
| Intune windows LOB MSI cache location (system context) | C:\Windows\system32\config\systemprofile\AppData\Local\mdm |
| Intune windows LOB MSI cache location (user context) | C:\Users\<username>\AppData\Local\mdm |
| Intune win32 app cache location | C:\Program Files (x86)\Microsoft Intune Management Extension\Content |
| Powershell Scripts Download location | C:\Program Files (x86)\Microsoft Intune Management Extension\Policies\Scripts |
| ADMX files location | C:\Windows\PolicyDefinitions |
| Defender for Endpoint Data | C:\ProgramData\Microsoft\Windows Defender Advanced Threat Protection |
Similar posts: