Naming Flow - Intune Naming Generator

Platform i

Type i

Category i

Category guide

Category answers: what type of object is this? It defines the broad management area before Scope and Purpose make the name more specific.

Category	Description
AccountProtection	Use for Windows Hello, LAPS, passwordless, Kerberos, local administrator controls and credential-related protection.
Analytics	Use for endpoint analytics, health monitoring, adoption analytics, usage analytics and reporting-related policies.
AppPolicy	Use for application settings, application configuration and application-related policy controls.
AppProtection	Use for app protection policy and Mobile Application Management.
AppControl	Use for application control, executable control and script control.
AssignmentFilter	Use for Intune assignment filters.
ASR	Use for Attack Surface Reduction rules and related ASR configuration.
Antivirus	Use for Microsoft Defender Antivirus configuration, update channels and Windows Security experience.
BitLocker	Use for BitLocker and disk encryption policy.
Compliance	Use for device compliance policies.
ConditionalAccess	Use for Conditional Access policies.
EDR	Use for Endpoint Detection and Response, Defender for Endpoint onboarding and EDR settings.
EPM	Use for Endpoint Privilege Management.
Enrollment	Use for Autopilot, enrolment restrictions, Enrollment Status Page and platform enrolment configuration.
Firewall	Use for firewall baseline and firewall rule configuration.
Licence	Use for licence assignment.
Network	Use for Wi-Fi, VPN, proxy, certificates, trusted certificates, PKCS/SCEP and network configuration.
RBAC	Use for administrative roles, role assignments and RBAC configuration.
Remediation	Use for scripts, detections or remediation objects.
Scope	Use for Intune RBAC scope tags and scope groups.
Security	Use for general security controls when no more specific security category applies.
Update	Use for update rings, driver updates, feature updates, quality updates and expedited updates.
UserExperience	Use for Start menu, lock screen, privacy, desktop experience, Windows consumer features and user experience settings.

Scope i

Scope guide

Scope answers: who, what or where is this for? It is the boundary the object applies to.

Scope type	Examples	When to use
All users/devices	All	All refers to all users if the User type is selected, or all devices if the Device type is selected.
Audience / role	AdminDeveloperITSupportFinanceHRExecutiveContractor	When the object targets a user role, department or support function.
Device scenario	AutopilotSharedKioskCorporatePersonalBYODCloudPCAVD	When the object applies to a specific device ownership or build scenario.
Location / region	LondonUKEMEAOffshoreMiddleEastAustralia	When the object is location-specific.
Platform/admin boundary	IntuneWindowsOffice365AzureManagement	Useful for RBAC, Conditional Access, scope tags or workload-specific objects.
Access scenario	GuestBreakGlassUnsupportedPlatformsSecurityInfoAdminPortals	Common for Conditional Access.

Converted to PascalCase and spaces removed.

Purpose i

Purpose guide

Purpose answers: what does this object do? It should not repeat the category or scope unless needed for clarity.

Category	Purpose examples
AccountProtection	LAPSWindows Hello For BusinessCredential ProtectionLocal Admin Protection
Analytics	Endpoint HealthStartup PerformanceApplication ReliabilityProactive Insights
AppPolicy	Microsoft StoreMicrosoft EdgeMicrosoft OfficeMicrosoft OneDriveInternet Explorer Mode
AppProtection	Browser OnlyData ProtectionApp PINBYOD ProtectionBaseline
AppControl	BaselineManaged InstallerAllowed AppsBlock Unsigned Apps
AssignmentFilter	Virtual MachinesDell DevicesHP DevicesHigh GPU DevicesLow Disk Space
ASR	Rules Defender Active OnlyRules Audit OnlyBlock Office MacrosExploit Protection
Antivirus	Defender Passive ModeDefender BaselineReal Time ProtectionCloud Protection
BitLocker	BaselineSilent EncryptionRecovery Key EscrowFixed Drive Encryption
Compliance	Defender For EndpointDevice HealthDevice SecurityPassword
ConditionalAccess	Require MFARequire MFA ExcludeRequire Compliant DeviceBlock Legacy AuthenticationNo Persistent Browser SessionApp Enforced Restrictions
EDR	Defender For Endpoint OnboardingCrowdStrike OnboardingTamper ProtectionTelemetry Configuration
EPM	Elevation RulesApproved Elevations
Enrollment	Deployment Profile BaselineDeployment Profile AlkaneStatus Page BaselineDomain JoinProfile Baseline
Firewall	BaselineRulesInbound RulesRemote AssistancePublic Profile
Licence	E5Intune SuiteCopilotBusiness Premium
Network	Corporate WiFiCorporate VPNPre Logon VPNTrusted Root CASCEP Device CertificateSCEP User Certificate
RBAC	Read Only OperatorApp AdministratorPolicy AdministratorSecurity AdministratorLAPS ReadersEPM Administrators
Remediation	Fix BitLocker EscrowFix Time ServiceDetect Local AdminsFix Defender Health
Security	BaselineSecurity OptionsSmartScreenUser RightsAudit Policy
Update	OS Ring 1 PilotOS Ring 2 UATOS Ring 3 ProductionAntivirus Ring 1 PilotDriver Ring 1 PilotWindows Update For Business
UserExperience	BaselineStart MenuTaskbarLock ScreenPrivacy Settings

Converted to PascalCase and spaces removed.

Stage i

Version i

Version applies to the category name only. Group names, scope tags and group tags do not include version.

Human description

Generated output

Category Name

Category Group Name

Scope Tag Name

Vendor i

Application i

Version i

Architecture i

Language i

Package Type i

Release i

Two digits, zero padded, for example 01, 02, 10.

Deployment

Platform i

Type i

Scope i

Scope guide

Scope answers: who, what or where is this for? It is the boundary the object applies to.

Scope type	Examples	When to use
All users/devices	All	All refers to all users if the User type is selected, or all devices if the Device type is selected.
Audience / role	AdminDeveloperITSupportFinanceHRExecutiveContractor	When the object targets a user role, department or support function.
Device scenario	AutopilotSharedKioskCorporatePersonalBYODCloudPCAVD	When the object applies to a specific device ownership or build scenario.
Location / region	LondonUKEMEAOffshoreMiddleEastAustralia	When the object is location-specific.
Platform/admin boundary	IntuneWindowsOffice365AzureManagement	Useful for RBAC, Conditional Access, scope tags or workload-specific objects.
Access scenario	GuestBreakGlassUnsupportedPlatformsSecurityInfoAdminPortals	Common for Conditional Access.

Converted to PascalCase and spaces removed.

Stage i

Human description

Generated output

Application Package Name

Application Deployment Group Name

Assignment Details