Collecting Windows Registry Values with Microsoft Intune

About This Article

Target Audience

IT administrators and endpoint management administrators who want to check registry values on Windows devices.

Test Environment

• Microsoft Intune admin center (as of September 2026)
• Windows 10 and later

Prerequisites

The device must:

• Be enrolled in Microsoft Intune
• Be Microsoft Entra joined or Microsoft Entra hybrid joined

Overview

Limitations

The following limitations apply:

• Only registry keys under HKLM are supported.
• Each registry value is limited to 6 KB.
• Up to 100 registry keys can be collected per device.

Step 1: Create a Properties Catalog Profile

1. Go to the Microsoft Intune admin center.

2. Select:

Devices > Windows

1. Under Manage devices, select:

Configuration > Create > New policy

1. Configure the following options, and then select Create:

• Platform: Windows 10 and later
• Profile type: Properties catalog

1. On the Basics page, enter the following information, and then select Next:

• Name: Enter a descriptive name.
• Description: Enter a description, if required.

1. Select Add properties, and then select the Registry category.

2. Add a registry key entry and configure the following settings:

• Registry key path

  • Specify the registry path under HKLM.

• Collection pattern

  • The following three collection methods are supported:
    • A single value
    • All values directly under a registry key, non-recursively
    • The same value across subkeys

• Value name

  • Specify the value name as required by the selected collection pattern.

1. You can select multiple properties from multiple categories.

For example, if you want to collect BIOS or TPM information together with registry data, you can select those properties here as well.

https://qiita-image-store.s3.ap-northeast-1.amazonaws.com/0/4499831/be9fe0dd-6959-43c7-8ed3-e03c806d4450.png

1. Select Next.

Step 2: Configure Scope Tags and Assignments

1. On the Scope tags page, optionally select the scope tags to assign to the profile, and then select Next.

2. On the Assignments page, select the groups that should receive the profile, and then select Next.

3. On the Review + create page, review the configuration and select Create.

Step 3: View the Collected Registry Data

1. Go to the Microsoft Intune admin center.

2. Select:

Devices > Windows

1. From the device list, select the target device.

2. Under Tools, select Device inventory.

3. To view the collected information, select the appropriate category.

For registry information, select the Registry category.

Once the data has been successfully collected, the registry information is displayed in the device inventory.

[!NOTE]
Data collection can only be stopped at the category level.

Even after you stop collecting a category, the most recently collected data can remain available in the inventory for up to 28 days.

References

• https://techcommunity.microsoft.com/blog/intunecustomersuccess/registry-inventory-in-microsoft-intune-verifying-%E2%80%99s-on-your-devices/4541312
• https://learn.microsoft.com/ja-jp/intune/device-configuration/collect-device-properties
• https://learn.microsoft.com/ja-jp/intune/intune-service/apps/app-management/deployment/enhanced-app-inventory