Update OS settings (configuration profiles) guide by noahtalerman · Pull Request #37982 · fleetdm/fleet

noahtalerman · 2026-01-07T14:25:26Z

Main goal is to clarify "Verifying" v. "Verified" for user-scoped Windows profiles
Also reorganize/update the heading to improve the guides flow
"user-scoped" and "device-scoped" get a hyphen

- Main goal is to clarify "Verifying" v. "Verified" for user-scoped Windows profiles - Also reorganize/update the heading to improve the guides flow - "user-scoped" and "device-scoped" get a hyphen

JordanMontgomery · 2026-01-07T14:34:28Z

articles/connect-end-user-to-wifi-with-certificate.md

 ```

-> Currently only device scoped SCEP profiles are supported for Windows devices.
+> Currently only device-scoped SCEP profiles are supported for Windows devices.


We actually support user-scoped as well so this can be removed

Great catch! Thanks

JordanMontgomery · 2026-01-07T14:36:40Z

articles/custom-os-settings.md

-#### Upgrading to 4.71.0
+### Windows
+
+To make a Windows configuration profiles user-scoped, replace `./Device` with `./User` in all `<LocURI>` elements.


We may want to refer user to the Windows CSP documentation: https://learn.microsoft.com/en-us/windows/client-management/mdm/policy-configuration-service-provider

Few CSPs actually indicate user support. Most are device only

articles/connect-end-user-to-wifi-with-certificate.md

articles/custom-os-settings.md

noahtalerman · 2026-01-07T16:32:29Z

articles/custom-os-settings.md

-#### Upgrading to 4.71.0
+### Windows
+
+1. Head to the [Windows configuration profiles (CSPs) documentation](https://learn.microsoft.com/en-us/windows/client-management/mdm/policy-configuration-service-provider) to verify that all the settings in your Windows profile support the user scope. For example, the [SCEP setting](https://learn.microsoft.com/en-us/windows/client-management/mdm/clientcertificateinstall-csp#devicescep) supports both the device and user scope.


@JordanMontgomery what do you think?

Looks great

articles/custom-os-settings.md

Clarified the verification process for macOS and Windows profiles, including timing for status updates.

noahtalerman · 2026-01-07T16:42:39Z

articles/custom-os-settings.md

+
+Hosts that applied all OS settings. 
+
+For macOS configuration profiles and device-scoped Windows profiles, Fleet verified by running an osquery query. It can take up to 1 hour ([configurable](https://fleetdm.com/docs/configuration/fleet-server-configuration#osquery-detail-update-interval)) for these profiles to move from "Verifying" to "Verified".


@JordanMontgomery is this "1 hour" part accurate?

cc @ddribeiro

@noahtalerman that is correct. If the host is online it should happen within 1 hour

mike-j-thomas · 2026-01-09T10:26:52Z

articles/custom-os-settings.md

+#### Windows
+
+1. Head to the [Windows configuration profiles (CSPs) documentation](https://learn.microsoft.com/en-us/windows/client-management/mdm/policy-configuration-service-provider) to verify that all the settings in your Windows profile support the user scope. For example, the [SCEP setting](https://learn.microsoft.com/en-us/windows/client-management/mdm/clientcertificateinstall-csp#devicescep) supports both the device and user scope.
+2. To make a Windows configuration profiles user-scoped, replace `./Device` with `./User` in all `<LocURI>` elements.


@noahtalerman, should this be a Windows configuration profile or Windows configuration profiles? Also, user scoped is the correct grammar for this sentence. It only needs to be hyphenated when modifying a noun, e.g., "user-scoped certificates."

@mike-j-thomas I went with your Windows configuration profile to be consistent with step 1.

Also, user scoped is the correct grammar for this sentence. It only needs to be hyphenated when modifying a noun, e.g., "user-scoped certificates."

Got it! Fixed.

Feedback addressed

noahtalerman · 2026-01-26T21:46:13Z

Hey @mike-j-thomas can you please give this guide update another review when you get the chance?

If the changes look good, please go ahead and merge them in 🚀

- Main goal is to clarify "Verifying" v. "Verified" for user-scoped Windows profiles - Also reorganize/update the heading to improve the guides flow - "user-scoped" and "device-scoped" get a hyphen

Update OS settings (configuration profiles) guide

ecf54f7

- Main goal is to clarify "Verifying" v. "Verified" for user-scoped Windows profiles - Also reorganize/update the heading to improve the guides flow - "user-scoped" and "device-scoped" get a hyphen

fleet-release requested a review from mike-j-thomas January 7, 2026 14:25

noahtalerman had a problem deploying to Docker Hub January 7, 2026 14:25 — with GitHub Actions Error

Fix typos in Wi-Fi certificate documentation

04f6a53

noahtalerman temporarily deployed to Docker Hub January 7, 2026 14:26 — with GitHub Actions Inactive

noahtalerman mentioned this pull request Jan 7, 2026

Full support for user scoped Windows configuration profiles #26942

Closed

JordanMontgomery reviewed Jan 7, 2026

View reviewed changes

noahtalerman commented Jan 7, 2026

View reviewed changes

articles/connect-end-user-to-wifi-with-certificate.md Outdated Show resolved Hide resolved

Update articles/connect-end-user-to-wifi-with-certificate.md

909ad37

noahtalerman had a problem deploying to Docker Hub January 7, 2026 16:25 — with GitHub Actions Error

noahtalerman commented Jan 7, 2026

View reviewed changes

articles/custom-os-settings.md Outdated Show resolved Hide resolved

Update articles/custom-os-settings.md

3940166

noahtalerman commented Jan 7, 2026

View reviewed changes

noahtalerman had a problem deploying to Docker Hub January 7, 2026 16:32 — with GitHub Actions Error

noahtalerman commented Jan 7, 2026

View reviewed changes

articles/custom-os-settings.md Show resolved Hide resolved

Update articles/custom-os-settings.md

331697f

noahtalerman had a problem deploying to Docker Hub January 7, 2026 16:33 — with GitHub Actions Error

noahtalerman commented Jan 7, 2026

View reviewed changes

articles/custom-os-settings.md Outdated Show resolved Hide resolved

noahtalerman commented Jan 7, 2026

View reviewed changes

articles/custom-os-settings.md Outdated Show resolved Hide resolved

noahtalerman added 2 commits January 7, 2026 11:33

Update articles/custom-os-settings.md

5e9b8a0

Update articles/custom-os-settings.md

5319a46

noahtalerman had a problem deploying to Docker Hub January 7, 2026 16:33 — with GitHub Actions Error

noahtalerman commented Jan 7, 2026

View reviewed changes

articles/custom-os-settings.md Show resolved Hide resolved

Update articles/custom-os-settings.md

dd92adc

noahtalerman had a problem deploying to Docker Hub January 7, 2026 16:36 — with GitHub Actions Error

noahtalerman requested a review from JordanMontgomery January 7, 2026 16:40

Update verification details for OS settings

44af0d5

Clarified the verification process for macOS and Windows profiles, including timing for status updates.

noahtalerman temporarily deployed to Docker Hub January 7, 2026 16:42 — with GitHub Actions Inactive

noahtalerman commented Jan 7, 2026

View reviewed changes

noahtalerman removed the request for review from JordanMontgomery January 7, 2026 22:20

Merge branch 'main' into noahtalerman-patch-51

a45762b

noahtalerman temporarily deployed to Docker Hub January 8, 2026 22:41 — with GitHub Actions Inactive

mike-j-thomas previously requested changes Jan 9, 2026

View reviewed changes

Update custom-os-settings.md

3bc12da

fleet-release requested a review from mike-j-thomas January 12, 2026 17:16

noahtalerman temporarily deployed to Docker Hub January 12, 2026 17:16 — with GitHub Actions Inactive

Merge branch 'main' into noahtalerman-patch-51

036ab03

noahtalerman temporarily deployed to Docker Hub January 13, 2026 14:56 — with GitHub Actions Inactive

Merge branch 'main' into noahtalerman-patch-51

f0910b1

noahtalerman temporarily deployed to Docker Hub January 14, 2026 15:23 — with GitHub Actions Inactive

Merge branch 'main' into noahtalerman-patch-51

d7e8780

noahtalerman temporarily deployed to Docker Hub January 26, 2026 21:45 — with GitHub Actions Inactive

mike-j-thomas approved these changes Jan 27, 2026

View reviewed changes

noahtalerman merged commit f0be639 into main Jan 27, 2026
6 of 7 checks passed

noahtalerman deleted the noahtalerman-patch-51 branch January 27, 2026 14:19


		Hosts that applied all OS settings.

		For macOS configuration profiles and device-scoped Windows profiles, Fleet verified by running an osquery query. It can take up to 1 hour ([configurable](https://fleetdm.com/docs/configuration/fleet-server-configuration#osquery-detail-update-interval)) for these profiles to move from "Verifying" to "Verified".

Conversation

noahtalerman commented Jan 7, 2026

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

noahtalerman commented Jan 26, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants