Shared Device Mode Profiles Creation
Windows Shared Device Mode (SDM) introduces specialized profile scopes with controlled payload availability to maintain system security while enabling dynamic user-session switching.
info
The option to create Shared Device Mode profiles is locked by default. Administrators must enable and save the configuration under Account Settings > Shared Device Mode > Windows to unlock the option.
Profile Scopes & Creation Types
When navigating to Profiles > Windows > + New Profile, choose between two primary profile scopes:
- Device Management Profile: Creates a management profile with access to all available Windows payload for configuring and managing devices.
- Shared Device Mode Profile: Specialized profile optimized for shared device architecture.
Within the Shared Device Mode Profile section, use the SDM - Device Profile toggle switch to define the payload target scope:
- Toggle ON (
Windows Profile (SDM - Device Profile)): Enforces global system baseline policies that persist on the device regardless of sign-in status (e.g., logged-out, or transition states). - Toggle OFF (
Windows Profile (SDM - User Profile)): Configures session-specific policies that dynamically apply when a matching user signs in and are automatically stripped upon user log-out.
Payload Scope Distribution Matrix
Payloads are strictly partitioned between Device and User profile types to guarantee policy stability across session changes.
| Payload Scope | Target Profile Type | Available Payloads |
|---|---|---|
| User Profile Payloads (Dynamic / Session-Specific) | Windows Profile (SDM - User Profile) | • Restriction Policy • VPN • Certificate Management (Wildcards and CA server retrieval are not supported; only manual certificate upload is supported) • Custom Settings • USB Media Control • Kiosk Profile • Custom ADMX • Browser Management • App Locker |
| Device Profile Payloads (Baseline / Persistent) | Windows Profile (SDM - Device Profile) | • Password Policy • Application Policy • Branding Configuration • Wi-Fi Configuration • File Sharing Policy • App Uninstall Policy • Windows Hello • Firewall Policy • Defender Profile • Licensing Profile |