Microsoft Intune
Device configurationCollect Device Properties
In brief
The documentation for collecting device properties now states that registry key inventory uses existing Device Inventory permissions and may expose sensitive device configuration information. It identifies this as an accepted risk and calls for reviewing security and privacy implications.
What Intune admins need to know
Administrators should review who can access registry inventory and assess the related security and privacy impact.
This summary was assembled from the tracked documentation change. Verify important details in the full Microsoft Learn article.
Documentation change
View on Microsoft LearnThe comparison below shows only the changed extract. Use the full-page view for complete context.
Lets you collect selected Windows registry data through the properties catalog for configuration visibility and troubleshooting. Here are some important details about this feature:
- Supported collection methods include a single value, all values directly under a key (non-recursive), and the same value across immediate subkeys.
- Registry key inventory isn't intended to collect sensitive or confidential values and includes detection logic to help prevent potentially sensitive values from being ingested. If a value is flagged as potentially sensitive, it isn't collected.
- To view collected registry data, use Device Inventory. Registry key inventory is accessible through existing device inventory permissions and may expose missed sensitive device configuration information; this is an accepted risk, and organizations should review security and privacy implications before enabling broad access.
- Initial release limitations include HKLM-only collection and enforced value (6KB) and per-device (100 registry keys) collection limits. :::column-end::: :::row-end:::
@@ -4,6 +4,7 @@ description: Use Microsoft Intune properties catalog to collect device propertie ms.date: 07/01/2026 ms.topic: how-to ai-usage: ai-assisted+ms.custom: msecd-doc-authoring-1018 ms.reviewer: abbystarr, madisoncooks --- @@ -176,7 +177,7 @@ Use the following steps to view the collected device inventory information: >Lets you collect selected Windows registry data through the properties catalog for configuration visibility and troubleshooting. Here are some important details about this feature: > - Supported collection methods include a single value, all values directly under a key (non-recursive), and the same value across immediate subkeys. > - Registry key inventory isn't intended to collect sensitive or confidential values and includes detection logic to help prevent potentially sensitive values from being ingested. If a value is flagged as potentially sensitive, it isn't collected.-> - To view collected registry data, use Device Inventory.+> - To view collected registry data, use Device Inventory. Registry key inventory is accessible through existing device inventory permissions and may expose missed sensitive device configuration information; this is an accepted risk, and organizations should review security and privacy implications before enabling broad access. > - Initial release limitations include HKLM-only collection and enforced value (6KB) and per-device (100 registry keys) collection limits. :::column-end::: :::row-end:::