In this article, we will see and learn about the Turn Off the Font Providers Policy Using Intune. We will apply the Turn Off Font Providers Policy with the help of Intune. We will make use of Configuration Profiles from Intune to implement this policy.
The Boolean policy setting determines whether Windows has permission to download fonts and font catalog data from an online font provider. Enabling this setting allows Windows to periodically check for new font catalogs and download font data if necessary for text formatting and rendering.
Disabling this policy prevents Windows from connecting to an online font provider and only lists locally installed fonts. This MDM setting corresponds to the EnableFontProviders Group Policy setting. If both the Group Policy and MDM settings are configured, the group policy setting takes precedence. If neither is configured, the behavior depends on the DisableFontProviders registry value.
By default, server editions have a registry value of 1, resulting in the behavior being false (disabled). In other editions, the registry value is not set by default, resulting in the behavior being true (enabled). This setting affects lower-level components responsible for text display and font handling and does not directly impact web browsers, which may download web fonts used in web content. Please note that a reboot is required after applying this policy, or you can alternatively stop and restart the FontCache service.
It’s important to note that this MDM (Mobile Device Management) setting corresponds to the EnableFontProviders Group Policy setting. If both the Group Policy and MDM settings are configured, the group policy setting takes precedence. However, if neither setting is configured, the behavior depends on the DisableFontProviders registry value.
It’s worth mentioning that this policy setting primarily affects lower-level components responsible for text display and font handling. It does not directly impact web browsers, which may independently download web fonts used in web content.
- How to Disable Unencrypted Traffic Using Intune
- Specify the Maximum log file size Policy Using Intune
Windows CSP Details AllowFontProviders
We will see Windows CSP Details for this Policy setting AllowFontProviders. This policy setting controls whether Windows is allowed to download fonts and font catalog data from an online font provider. By enabling this setting, Windows periodically checks with an online font provider to determine if there are any new font catalogs available. If necessary, Windows may download font data to format or render text properly.
Please note that after applying this policy, a system reboot is required. Alternatively, you can stop and restart the FontCache service for the changes to take effect.
CSP URI – ./Device/Vendor/MSFT/Policy/Config/System/AllowFontProviders
Turn Off the Font Providers Policy Using Intune
To apply the Turn Off Font Providers Policy Using Intune, follow the steps stated below:
- Sign in to the Intune Admin Center portal https://intune.microsoft.com/.
- Select Devices > Windows > Configuration profiles > Create a profile.
In Create Profile, Select Windows 10 and later in Platform, and Select Profile Type as Settings catalog. Click on Create button.
| Platform | Profile Type |
|---|---|
| Windows 10 and later | Settings Catalog |
On the Basics tab pane, provide a name for the policy as “Font Providers Policy.” Optionally, you can enter a description for the policy and then proceed by selecting “Next.”
Now in Configuration settings, click Add Settings to browse or search the catalog for the settings you want to configure.
In the Settings Picker windows, search by the keyword Font Providers, you will see the System category, and select this.
When you select the option as stated above, you will see only one setting, which is Allow Font Providers. After selecting your setting, click the cross mark at the right-hand corner, as shown below.
Now, in the Administrative Templates, set Allow Font Providers to Not allowed, as shown below in the image.
Using Scope tags, you can assign a tag to filter the profile to specific IT groups. One can add scope tags (if required) and click Next to continue. Now in Assignments, in Included Groups, you need to click on Add Groups, choose Select Groups to include one or more groups, and click Next to continue.
In the Review + Create tab, you need to review your settings. After clicking on Create, your changes are saved, and the profile is assigned.
An automatic notification will be displayed in the top right-hand corner to indicate the successful creation of the “Font Providers Policy.“ Additionally, you can verify its presence by checking the Configuration Profiles list, where the policy will be clearly visible.
Your groups will receive your profile settings when the devices check in with the Intune service. The Policy applies to the device.
Intune Report for Turn Off the Font Providers Policy
From Intune Portal, you can view the Intune settings catalog profile report, which provides an overview of device configuration policies and deployment status.
To monitor the assignment of the policy, you must choose the appropriate policy from the list of Configuration Profiles. You can check the device and user check-in status to see if the policy has been successfully applied. If you wish to view more information, you can click on “View Report” to see additional details.
Intune MDM Event Log
To ascertain the successful application of String or integer policies on Windows 10 or 11 devices using Intune, event IDs 813 and 814 can be utilized. By analyzing these event IDs, you can identify both the policy’s application status and the specific value associated with the applied policy on those devices. For this specific policy, the value is an integer and is associated with event ID 813.
To confirm this, you can check the Event log path – Applications and Services Logs – Microsoft – Windows – Devicemanagement-Enterprise-Diagnostics-Provider – Admin.
MDM PolicyManager: Set policy int, Policy: (AllowFontProviders), Area: (System), EnrollmentID requesting merge: (4009A089-4FBA-482B-9D17-9E5A8428CB98), Current User: (Device), Int: (0x0), Enrollment Type: (0xD), Scope: (0x0).
Upon examining the above-mentioned log in the Event Viewer, you will discover crucial details such as the Area and Enrollment ID. These pieces of information are instrumental in identifying the registry path. To find the relevant information, kindly refer to the table provided below:
| Area | Policy | Integer | Scoped | Event ID |
|---|---|---|---|---|
| System | AllowFontProviders | 0 | Device | 813 |
The information provided in the above table for Turn Off Font Providers Policy Using Intune can be utilized to access the registry settings storing group policy configurations on a target computer. By running “REGEDIT.exe” on the target computer, you can navigate to the specific registry path where these settings are stored.
- Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\providers\4009A089-4FBA-482B-9D17-9E5A8428CB98\default\Device\System
When you navigate to the above path in the Registry Editor, you will find the registry key with the name AllowFontProviders. Refer to the table and image below.
| Registry Name | Value |
|---|---|
| AllowFontProviders | 0 |
Author
Abhinav Rana is working as an SCCM Admin. He loves to help the community by sharing his knowledge. He is a B.Tech graduate in Information Technology.