⚠️ Important: This policy affects all users on configured devices. Test on a small group before deploying widely.
Overview
Configure an Intune policy to hide the Pictures, Music, and Videos library folders in Windows using the Settings catalog. This guide provides step-by-step instructions for IT administrators.
Affected Systems
- Windows 10 and 11 devices
- Microsoft Intune managed devices
- Windows File Explorer
Prerequisites
- Access to Microsoft Intune admin centre
- Appropriate permissions to create and deploy configuration policies
Resolution Steps
- Access Settings Catalog
- Sign in to Microsoft Intune admin centre (endpoint.microsoft.com)
- Navigate to Devices Windows Configuration profiles
- Click "Create profile"
- Platform: Select "Windows 10 and later"
- Profile type: Choose "Settings catalog"
- Configure Base Settings
- Name your profile (e.g., "Hide Library Folders Policy")
- Add a description (optional)
- Click "Next"
- Configure Policy Settings
- Click "Add settings"
- Search for or navigate to: Windows Components File Explorer
- Find "Disable Known Folders (User)"
- Enable the setting
- Click the X above "search" button to close the Settings picker
- Add the following folder GUIDs:
{33E28130-4E1E-4676-835A-98395C3BC3BB} {2112AB0A-C86A-4ffe-A368-0DE96E47012E} {18989B1D-99B5-455B-841C-AB7C74E4DDFC}
- These GUIDs correspond to:
- Pictures: {33E28130-4E1E-4676-835A-98395C3BC3BB}
- Music: {2112AB0A-C86A-4ffe-A368-0DE96E47012E}
- Videos: {18989B1D-99B5-455B-841C-AB7C74E4DDFC}
- Assignment Configuration
- Proceed to "Assignments" tab
- Select the groups or users to receive this policy
- Consider testing with a pilot group first
- Click "Next"
- Review and Create
- Review your configuration
- Click "Create" to deploy the policy
Verification
After deploying the policy:
- Allow time for policy sync (typically within 24 hours)
- Check target devices:
- Open File Explorer
- Verify Pictures, Music, and Videos libraries are hidden
- Confirm policy shows as "Succeeded" in Intune portal
Troubleshooting
If folders remain visible:
- Force policy sync on the device
- Check policy assignment status in Intune
- Verify user is in assigned group
- Review deployment reports for errors
💡 Pro Tip: You can check the policy deployment status in Intune by navigating to Devices Monitor Policy status.
Additional Notes
- This configuration applies at the user level
- Changes affect all users on configured devices
- Hidden folders remain accessible through direct path navigation
- Policy can be reversed by removing the configuration or disabling the policy
Need Further Assistance?
If you encounter issues implementing this policy, contact your IT support team or Microsoft support for assistance. Document any error messages or unexpected behavior when seeking help.
Comments
0 comments
Please sign in to leave a comment.