To collect selected Windows registry data from managed devices, create and assign a Windows Properties catalog policy in Intune. Choose the Registry property category and specify whether to collect one value, values directly under a key, or the same value from immediate subkeys. For a quick check on one device, use Intune Device Query instead.
Choose the right Intune method
| Method | Best for | Scope and timing | Key dependency |
|---|---|---|---|
| Properties catalog | Recurring visibility into selected registry data across assigned devices | Applies at device check-in; initial inventory can take up to 24 hours. Active devices are collected multiple times per day, with a full sync once per day. | Assigned policy and device sync |
| Device Query | Checking a registry value on one device during troubleshooting | Real-time query of a single device | Windows Push Notification Services (WNS) connectivity |
Microsoft documents Device Query as a way to query supported properties in real time, including checking a registry key value. Use the Properties catalog when you need an ongoing inventory rather than a one-time support check.
As an Amazon Associate I earn from qualifying purchases.
Configure registry collection with the Properties catalog
- In the Intune admin center, create a Windows 10 and later configuration policy and choose the Properties catalog profile type.
- Add the Registry property category. Select a collection shape supported by the interface: a single value, all values directly under a key, or a selected value across immediate subkeys.
- Enter the registry path and value information you want to collect, then save the policy.
- Assign the policy to the device groups that should report the inventory. The policy applies at each device’s next check-in.
- Open a managed device in Intune and inspect Device Inventory, then select the Registry category.
Collection is selective, not a complete endpoint registry export. The documented collection methods cover values directly under a key or immediate subkeys; they do not describe recursive traversal through deeper descendants.
Do these 3 things before closing this tab:
1Scan for outdated or missing drivers - takes under a minute2Repair Windows errors before they cause bigger problems3Fix the driver behind crashes, sound loss and screen glitchesUnderstand supported scope and limits
Microsoft’s Properties catalog documentation, reviewed in 2026, describes the initial-release limits below. Product behavior can change, so consult the current feature documentation when configuring a tenant.
#1 Best Overall
- 14" diagonal, 1366x768 resolution, HD BrightView LED, Glossy NON-TOUCH Display
- Hive: HKLM only.
- Value size: Maximum 6 KB per registry value.
- Number of keys: Maximum 100 registry keys per device.
- Traversal: Values directly under a key or values under its immediate subkeys; no recursive collection is documented.
Permissions and collection timing
Creating the policy requires an appropriate role, such as Policy and Profile Manager, or a custom role with the necessary device-configuration permissions. To view collected inventory, the account needs Managed Devices/Read. The device must receive the assigned policy at check-in, and initial inventory may take up to 24 hours. Microsoft also says active devices are collected multiple times daily, while a full sync runs once per day.
Protect sensitive registry data
Microsoft cautions: “Registry key inventory isn’t intended to collect sensitive or confidential values and includes detection logic to help prevent potentially sensitive values from being ingested.” That detection should not be treated as a guarantee that every sensitive value will be excluded. Microsoft also notes that sensitive configuration data missed by the detection logic may remain visible to people who already have device-inventory permissions. Review the data and access implications before assigning a policy broadly.
Rank #2
- 256 GB SSD of storage.
- Multitasking is easy with 16GB of RAM
- Equipped with a blazing fast Core i5 2.00 GHz processor.
When app inventory or Remediations fit better
Installed application details
Use Intune app inventory when the question is which Win32 applications are installed and what their metadata is. It reads machine-level and per-user uninstall registry data, including 32-bit applications on 64-bit systems. It is not a general-purpose collector for arbitrary registry paths, and a Properties catalog policy must be assigned to enable reporting.
Script-based detection and fixes
Use Remediations when you need supported script-based detection and corrective action, not as the default way to inventory registry values. Eligibility and licensing requirements apply. Microsoft says not to use scripts to collect personal data; script output is limited to 2,048 characters.
Quick Recap
Rank #4
- 14” Diagonal HD BrightView WLED-Backlit (1366 x 768), Intel Graphics,
- Intel Celeron Dual-Core Processor Up to 2.60GHz, 4GB RAM, 64GB SSD
- 3x USB Type A,1x SD Card Reader, 1x Headphone/Microphone
- 802.11a/b/g/n/ac (2x2) Wi-Fi and Bluetooth, HP Webcam with Integrated Digital Microphone
- Windows 11 OS, Dale Blue
Rank #3
- FULL HD IPS DISPLAY - Enjoy vibrant, crystal-clear images with 178-degree wide-viewing angles
- AMD RYZEN 3 30 PROCESSOR - Everyday performance you can count on; Multitask, stream, game casually, and edit photos smoothly with responsive power and vibrant HDR visuals
- ENJOY UP TO 14 HOURS AND 15 MINUTES OF BATTERY LIFE - HP Fast Charge restores battery from 0 to 50% in approximately 45 minutes
- AMD RADEON 610M GRAPHICS - Experience smooth entertainment; Built for streaming and multitasking, enjoy realistic visuals and efficient performance for work and play
- STORAGE AND MEMORY - 512 GB PCIe NVMe M.2 SSD offers fast speed and efficient storage; and 8 GB LPDDR5 RAM memory boosts performance with higher bandwidth
Troubleshoot missing registry data
- Check assignment: Confirm the policy targets the device and is not blocked by group membership or assignment scope.
- Allow for check-in and inventory: The policy applies at the next check-in, but initial inventory can take up to 24 hours.
- Verify access: The account needs the required configuration permissions to set up policy and Managed Devices/Read to view inventory.
- Check the requested path: Confirm the value is under HKLM and that the path and value name match the device’s registry.
- Check documented limits: A value larger than 6 KB or a configuration exceeding 100 registry keys per device is outside the stated initial-release limits.
- For Device Query: If a real-time query fails, check whether WNS is blocked or unavailable; Microsoft identifies WNS as a dependency.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
