Microsoft Intune

Collect Device Properties

7 August 2026Updated+2 / −2 lines

In brief

The documentation now notes that collected registry key data is accessible through existing Device Inventory permissions and may expose sensitive device configuration information.

What Intune admins need to know

Review the security and privacy implications of registry key inventory access in your organization.

This summary was assembled from the tracked documentation change. Verify important details in the full Microsoft Learn article.

Documentation change

Open full page diff →

The comparison below shows only the changed extract. Open the full-page diff for complete context.

Lets you collect selected Windows registry data through the properties catalog for configuration visibility and troubleshooting. Here are some important details about this feature:

Supported collection methods include a single value, all values directly under a key (non-recursive), and the same value across immediate subkeys.

Registry key inventory isn't intended to collect sensitive or confidential values and includes detection logic to help prevent potentially sensitive values from being ingested. If a value is flagged as potentially sensitive, it isn't collected.

To view collected registry data, use Device Inventory. Registry key inventory is accessible through existing device inventory permissions and may expose missed sensitive device configuration information; this is an accepted risk, and organizations should review security and privacy implications before enabling broad access.

Initial release limitations include HKLM-only collection and enforced value (6KB) and per-device (100 registry keys) collection limits. :::column-end::: :::row-end:::

\ No newline at end of file [Custom role]: ../fundamentals/role-based-access-control/create-custom-role.md

@@ -176,7 +176,7 @@ Use the following steps to view the collected device inventory information: >Lets you collect selected Windows registry data through the properties catalog for configuration visibility and troubleshooting. Here are some important details about this feature: > - Supported collection methods include a single value, all values directly under a key (non-recursive), and the same value across immediate subkeys. > - Registry key inventory isn't intended to collect sensitive or confidential values and includes detection logic to help prevent potentially sensitive values from being ingested. If a value is flagged as potentially sensitive, it isn't collected.-> - To view collected registry data, use Device Inventory.+> - To view collected registry data, use Device Inventory. Registry key inventory is accessible through existing device inventory permissions and may expose missed sensitive device configuration information; this is an accepted risk, and organizations should review security and privacy implications before enabling broad access. > - Initial release limitations include HKLM-only collection and enforced value (6KB) and per-device (100 registry keys) collection limits. :::column-end::: :::row-end:::@@ -205,4 +205,4 @@ To troubleshoot issues with the properties catalog, review the client logs at `C  <!--Intune roles--> -[Custom role]: ../fundamentals/role-based-access-control/create-custom-role.md\ No newline at end of file+[Custom role]: ../fundamentals/role-based-access-control/create-custom-role.md