Detect and block Shadow AI using the properties catalog, device query, and a security baseline (preview)
Using Intune, you can detect and block a Local AI Agent, like OpenClaw, on Windows devices enrolled in Intune. Specifically, you can:
- Use a Properties catalog policy to collect the Local AI Agent entity. Admins can use this information to identify devices where OpenClaw is present or active.
- Use Device Query to view devices with a Local AI Agent, like OpenClaw.
- Use the Local AI Agent Baseline - OpenClaw (Preview) to block users from using OpenClaw.
This feature is in preview.
Applies to
- Windows
Terms in this update
This is in the weekly digest for week 39 · What changed this week? →
More Intune updates
Agentic identity for the Policy Configuration Agent (public preview)
Bulk eSIM activation and wipe options for corporate-owned Android Enterprise devices
Device query for multiple devices for app inventory on Windows
Stage app and policy rollout with deployment plans
Updated minimum supported version for iOS and iPadOS
Updated minimum supported version for macOS
Text by Microsoft, from Microsoft's documentation. Features and dates may change. Terms and the timeline are added by 365Fanatic.
