Intune Power Settings Best Practices for Laptops | Guide

Intune Power Settings: Best Practices for Laptops

Managing power settings via Intune requires a balance between security requirements, hardware compatibility (Modern Standby), and user productivity. Based on community consensus and enterprise experience, the following approaches are recommended.

Approach 1: Minimalist (Recommended)

Avoid enforcing rigid power policies that lock user settings. Misconfigured sleep timers often lead to data loss or “Modern Standby” wake-up failures. Instead, focus strictly on security-related timeouts.

1. Manage Screen Lock Only: Enforce a 15-minute inactivity lock (CIS Baseline) or 20 minutes for general enterprise use.
2. User Autonomy: Leave Sleep and Hibernate settings unconfigured to allow users to adjust for their specific workflows (e.g., long data transfers or presentations).

Approach 2: Enforced Security Configuration

If your organization requires a hardened power baseline, use the Settings Catalog to configure the following values.

Portal Path:

Devices > Configuration > Create > New Policy > Windows 10 and later > Settings catalog

Setting Category	Setting Name	Recommended Value
Experience	Device Lock Unattended Timeout	900 (15 minutes)
Power	Standby Timeout On Battery	1800 (30 minutes)
Power	Standby Timeout Plugged In	0 (Never)
Power	Lid Close Action On Battery	Hibernate
Power	Lid Close Action Plugged In	Do Nothing

Approach 3: PowerShell Scripting (Soft Enforcement)

To set default power behaviors without locking the UI, deploy a PowerShell script. This is preferred for laptops to prevent overheating in bags by ensuring hibernation occurs when on battery.

PowerShell

# Disable Sleep when plugged in
powercfg -change -standby-timeout-ac 0

# Enable Hibernation
powercfg /hibernate on

# Set Hibernate on Lid Close (Battery)
# GUID for Lid Close Action: 5ca83367-6e45-459f-a27b-476b1d01c936
# Index 2 = Hibernate
powercfg -setdcvalueindex SCHEME_CURRENT 4f971e89-eebd-4455-a8de-9e59040e7347 5ca83367-6e45-459f-a27b-476b1d01c936 2

# Apply changes
powercfg -SetActive SCHEME_CURRENT

Verification Steps

1. Local Machine: Run powercfg /query to verify active power scheme settings.
2. Intune Report: Review the Device configuration report in the Intune portal to ensure the profile status is Succeeded.
3. Registry: Check HKLM\Software\Policies\Microsoft\Power\PowerSettings for enforced ADMX-backed settings.

Enterprise Notes

• Modern Standby (S0): Modern laptops often use S0 Low Power Idle instead of traditional S3 Sleep. Forcing S3 via registry on S0-capable hardware often causes blue screens or boot loops.
• Overheating Risk: Always configure Hibernate on lid close for battery mode. Laptops in “Modern Standby” often stay active in bags, leading to battery drain and thermal damage.
• User Impact: Forcing a short “Plugged In” sleep timer is a frequent source of helpdesk tickets for users running long-running processes or using secondary monitors.
• Conflict Management: If using GPO and Intune, ensure the Control Policy Conflict CSP is set to prefer Intune to avoid “Flickering” settings.