# Back up Intune ADMX policies | TenuVault Back up Intune ADMX policies with TenuVault, including every configured setting and value. Review Administrative Template restore limits before recovery. Canonical: https://www.tenuvault.com/guides/back-up-intune-admx-policies Practical guide # Back up Intune ADMX policies Back up Intune ADMX policies by selecting Administrative templates in TenuVault. The backup includes every configured setting and its values, together with assignments. Restore supports copies and in-place recovery, but replacement is blocked if the current template cannot be read. [Start with Community](https://www.tenuvault.com/download)[Plans and features](https://www.tenuvault.com/pricing) ## Does an ADMX backup include every configured setting? For legacy Administrative Templates, a profile name is only the outer container. Recovery needs the configured settings and their values as well as the intended assignments. TenuVault explicitly documents all of those as included for Administrative templates. Use this guide when preserving those template policies before cleanup or a settings migration. For ADMX settings already configured through Settings Catalog, select the Settings Catalog type instead. Keep an inventory that distinguishes the two, particularly when the tenant contains similar policy names in both areas. ## Can I export ADMX policies from Intune? Microsoft documents that the older Templates > Administrative Templates profile type is deprecated and read-only in the Intune admin center. ADMX settings are available through the Settings Catalog for current configuration work. Review the format of the policy you actually have. A legacy Administrative Template and a Settings Catalog policy are different backup selections. Exporting or documenting one does not establish that the other was captured, and a backup should not be described as an automatic migration between those formats. - [Microsoft: manage this configuration](https://learn.microsoft.com/en-us/intune/device-configuration/settings-catalog/configure-admx-templates-windows) - [Compare Intune policy export formats](https://www.tenuvault.com/guides/export-intune-policies) ## How do I back up Intune ADMX policies? Build the ADMX inventory by profile format before selecting a backup scope. Older Administrative Templates need their own entry, while settings moved into a catalog policy belong to the Settings Catalog selection. 1. Choose Administrative templates within the Custom dialog for legacy ADMX profiles. 2. Add Settings catalog and endpoint security policies only when your inventory also includes catalog-based ADMX configuration. 3. After starting the capture, check that the expected template objects were read. A saved container name alone does not establish that its configured values are available. 4. Inspect Administrative templates under Device configuration in Backup Details. Match each saved policy to its configured choices, and keep the legacy snapshot while any catalog migration remains under review. - [Prepare and verify your first Intune backup](https://www.tenuvault.com/guides/intune-backup-setup) - [Review Intune backup scope and storage](https://www.tenuvault.com/intune-backup) ## When is Administrative Template replacement blocked? Create copies makes a separate object for inspection. Replace in place restores the backed-up version when the current template can be read. TenuVault explicitly blocks replacement if it cannot read the current administrative template; do not assume a saved file bypasses service access or template restrictions. Assignments are captured but only restored when you choose Restore assignments on Pro or MSP. In-place recovery and restoring several items also require Pro or MSP. Community can restore one unassigned copy at a time. Review the result for incomplete objects, since creating the container and restoring its settings can involve separate steps. - [Review restore modes and plan requirements](https://www.tenuvault.com/intune-restore) ## How do I compare a restored ADMX policy with its original? Compare several configured settings and their actual values, rather than checking only the restored name. Include settings with different choices so your drill checks more than a single enabled switch. Keep the restored copy unassigned while reviewing it. If replacement is blocked by a failed live read, resolve the read failure or reconcile the configuration in Intune. Do not repeatedly create copies to work around an incomplete result. Record whether recovery succeeded for the policy format you tested, and keep a separate migration plan for moving legacy settings into Settings Catalog. Download TenuVault and rehearse with one ADMX policy containing several configured choices. Compare its unassigned restored copy with the original settings, including disabled choices and value fields. On your tenant, record a failed live-template read as a replacement blocker rather than treating another copy as an equivalent rollback. - [Download TenuVault for Windows or macOS](https://www.tenuvault.com/download) - [Plan an Intune restore drill](https://www.tenuvault.com/guides/intune-restore-drill) - [Back up Conditional Access separately](https://www.tenuvault.com/guides/backup-conditional-access-policies) ## Read the technical guides - [Backup coverage by object type](https://docs.tenuvault.com/backups/coverage/) - [Restore modes and assignments](https://docs.tenuvault.com/restore/modes/) - [Restore limitations and incomplete results](https://docs.tenuvault.com/restore/limitations/) Product scope reviewed 11 November 2026. Check your installed release and the current plan table before using a workflow. ## Frequently asked questions ### Q: Does the backup contain every possible ADMX setting? A: It contains every configured setting and its values in the Administrative Template policy. This does not mean every available setting in every ADMX definition is configured or exported. ### Q: Can I restore when the current template cannot be read? A: TenuVault blocks replace in place for that template. Investigate access and the live read before attempting replacement. ### Q: Does a backup migrate legacy templates to Settings Catalog? A: The documented backup and restore workflow preserves configuration. It does not promise automatic conversion from legacy Administrative Templates into Settings Catalog policies. ## Related guides - [Intune backup](https://www.tenuvault.com/intune-backup) - [Back up Intune app protection policies](https://www.tenuvault.com/guides/back-up-intune-app-protection-policies) - [Back up Intune assignment filters](https://www.tenuvault.com/guides/back-up-intune-assignment-filters) - [Back up Intune Autopilot profiles](https://www.tenuvault.com/guides/back-up-intune-autopilot-profiles) ## Review your setup before the first change Community is free for one tenant. Try Pro free by connecting a new tenant in the app, no email or card needed. Tenant access, supported restore types and scheduling requirements still apply. [Start free trial](https://www.tenuvault.com/trial?src=cta)[Book a 30-minute demo](https://cal.com/ugur-koc/tenuvault-demo)[Permissions and data flows](https://www.tenuvault.com/trust)