How to Restrict Bluetooth Access to One Device with Microsoft Intune
Question details
The user needs to configure Microsoft Intune to restrict Windows device Bluetooth access to a single specific peripheral using its UUID.
- Product
- Microsoft Intune
- Device & OS
- not provided
- Scenario
- Configuring Bluetooth device restrictions in a managed IT environment via Intune endpoint management.
- Observed behavior
- The current Intune Bluetooth policy allows all Bluetooth devices to connect, despite the allowed services list being configured with the UUID of only one specific speaker.
Ensure you have administrative access to the Microsoft Endpoint Manager admin center and have identified the exact hardware-specific Bluetooth UUID (Universally Unique Identifier) for the device you intend to allow.
Review Windows Device Restriction Settings in Intune
Verify your configuration profile to ensure the Bluetooth device restriction policy is correctly applied and not overridden by conflicting profiles.
Intune allows administrators to control Bluetooth connections by allowlisting specific service UUIDs. If all devices are still connecting, the policy may be misconfigured, failing to deploy, or the specified UUID might represent a generic Bluetooth service rather than a hardware-specific identifier.
Log in to the Microsoft Endpoint Manager admin center using your administrator credentials.
Navigate to 'Devices' > 'Configuration profiles' and select the profile that manages your Windows 10/11 Bluetooth restrictions.
Check the 'Bluetooth allowed services' setting to ensure it specifically includes the correct, hardware-specific UUID of the speaker, rather than a broad service UUID like general audio streaming.
Review other assigned policies for the targeted devices to ensure no conflicting profiles are overriding your restrictions and allowing broad Bluetooth connections.
Trigger a manual device sync from the admin center to ensure the latest policy configurations have successfully reached the targeted Windows devices.
Empower Your Managed Devices with WPS Office
While you manage device security and Bluetooth policies through Microsoft Intune, equip your fleet with WPS Office. It provides a lightweight, highly compatible, and free alternative to Microsoft Office, ensuring seamless productivity across your entire organization without heavy licensing overhead.
Frequently Asked Questions
Why does my Intune Bluetooth policy allow all devices despite UUID allowlisting?
This often occurs if there are conflicting configuration profiles applied to the same device, or if the policy has not fully synced. Additionally, some UUIDs may represent broad Bluetooth services (like generic audio streaming) rather than a specific hardware identifier.
How do I find the correct Bluetooth UUID for my specific speaker?
You can usually find the Bluetooth device UUID by connecting the device to a Windows PC, opening Device Manager, locating the Bluetooth device, right-clicking for Properties, and checking the 'Hardware Ids' or 'Bluetooth service UUIDs' under the Details tab.
Can I restrict Bluetooth access on Windows 11 exactly as I do on Windows 10 via Intune?
Yes, Windows 10 and Windows 11 share the same foundational Bluetooth device restriction settings in Microsoft Intune. Policies configured for Windows 10 generally apply identically to Windows 11 endpoints.
