Configure Dynamic lock with Microsoft Intune

Dynamic Lock is a security feature in Windows that automatically locks your computer when you step away from it. It uses Bluetooth to detect the proximity of a paired device, such as your smartphone. If the device moves out of range, Windows will lock the computer to prevent unauthorized access. This feature enhances security by ensuring your device is protected even if you forget to manually lock it.

To configure Dynamic lock using Microsoft Intune, follow these steps:

1. Open the Microsoft Intune admin center and navigate to Devices > Windows > Configuration policies.
2. Create a new policy:
   • Platform: Windows 10 and later
   • Profile type: Templates – Custom
   • Select Create
3. Configure the profile:
   • Name: Provide a name for the profile.
   • Description: (Optional) Add a description.
4. Add OMA-URI settings:
   • Enable Dynamic lock:
     • Name: Enable Dynamic lock
     • Description: (Optional) This setting enables Dynamic lock
     • OMA-URI: ./Device/Vendor/MSFT/PassportForWork/DynamicLock/DynamicLock
     • Data type: Boolean
     • Value: True
   • Define the Dynamic lock signal rule:
     • Name: Dynamic lock Signal Rule
     • Description: (Optional) This setting configures Dynamic lock values
     • OMA-URI: ./Device/Vendor/MSFT/PassportForWork/DynamicLock/Plugins
     • Data type: String
     • Value: <rule schemaVersion="1.0"><signal type="bluetooth" scenario="Dynamic Lock" classOfDevice="512" rssiMin="-10" rssiMaxDelta="-10"/></rule>
5. Assign the profile to the appropriate groups.

Also avialable here: Microsoft Learn