How to enforce the custom fonts via Intune app registrations

To enforce custom fonts across devices in your organization using Microsoft Intune, you’ll need to deploy the fonts as part of a configuration profile. Here’s a step-by-step guide:

---

1. Prepare the Custom Fonts

• Obtain the .ttf or .otf files for your fonts.
• Compress the font files into a .zip file for easier deployment.

---

2. Create a PowerShell Script

Write a PowerShell script to install the fonts. Here’s an example script:

# Path to extract fonts
$fontPath = "$env:SystemRoot\Fonts"

# Define font files
$fontFiles = @(
    "YourFont1.ttf",
    "YourFont2.ttf"
)

# Path to font source (adjust as per deployment)
$sourcePath = "C:\CustomFonts"

# Install Fonts
foreach ($font in $fontFiles) {
    $fontFullPath = Join-Path -Path $sourcePath -ChildPath $font
    if (Test-Path $fontFullPath) {
        Copy-Item -Path $fontFullPath -Destination $fontPath -Force
        Start-Process -FilePath "reg.exe" -ArgumentList "add HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Fonts /v '$font (TrueType)' /t REG_SZ /d $font /f" -Wait
    } else {
        Write-Output "$font not found in $sourcePath"
    }
}

Modify the script to reflect the correct font file names and their source location.

---

3. Deploy Fonts via Intune

a. Upload the Font Files

1. Use the Microsoft Endpoint Manager Admin Center.
2. Go to Devices > Scripts.
3. Click Add and choose Windows 10 and later.
4. Upload the PowerShell script created earlier.
5. Assign the script to device groups where fonts should be installed.

b. Deploy Fonts as Win32 App (Optional)

Alternatively, package the fonts and script into a .intunewin file using the Microsoft Win32 Content Prep Tool. Then, deploy it as a Win32 app through Intune.

---

4. Configure App Settings for Custom Font Use

After deploying the fonts, ensure that:

• Applications (e.g., Microsoft Office, custom apps) are configured to use these fonts as their default.
• This might require additional configuration files, registry updates, or Group Policy Objects (GPOs).

---

5. Monitor Deployment

1. Check Intune reports to verify font installation success.
2. Test on enrolled devices to ensure the fonts are available and functional.

---

Would you like further guidance on packaging as a Win32 app or automating additional configurations? email us at [email protected]

To enforce custom fonts using Microsoft Intune, you can create a configuration policy that includes at least two options. Here’s how you can structure this policy:

---

Policy 1: Custom Font Installation via PowerShell Script

This policy will ensure that the custom fonts are installed on devices through a PowerShell script.

Steps:

1. Create a PowerShell Script for Font Installation:
   • Use the PowerShell script from the previous response to install the fonts.
   • Ensure that the script is packaged correctly, so it installs fonts when run on the device.
2. Deploy the PowerShell Script in Intune:
   • Go to Endpoint Manager Admin Center > Devices > Scripts > Add.
   • Choose Windows 10 and later.
   • Upload your PowerShell script that installs the fonts.
   • Assign the script to the required device groups.

Outcome: This policy will install the custom fonts to the target devices.

---

Policy 2: Restrict Font Usage and Default to Custom Fonts

This policy ensures that certain applications default to using the custom fonts, particularly Microsoft Office apps, and restricts users from choosing other fonts.

Steps:

1. Create a Device Configuration Profile (Windows 10):
   • Go to Endpoint Manager Admin Center > Devices > Configuration profiles > Create Profile.
   • Choose Windows 10 and later > Templates > Custom.
2. Configure the Settings: Add a custom configuration profile to point to the custom font. This might involve editing the registry to enforce the custom font or creating a custom script that applies these settings.

   Example registry changes to force Office apps to use the installed font:

   • Key: HKEY_CURRENT_USER\Software\Microsoft\Office\<version>\Word\Options
   • Value: DefaultFont
   • Data: Set this to the name of your custom font, e.g., YourCustomFont.

   You can push this configuration via the custom settings section.

3. Assign the Policy:
   • Assign the configuration profile to the device groups you want to apply the font restrictions.

Outcome: This policy will ensure that the devices use the custom fonts for supported applications (like Microsoft Office), and it can restrict the use of other fonts by forcing the default font setting.

---

Combining Policies

By using both the PowerShell script for font installation and the custom configuration profile for enforcing font usage, you ensure that:

1. The custom fonts are installed on the devices.
2. Applications default to the custom fonts, and users cannot easily override them.

---

Summary of Policies

• Policy 1: PowerShell Script to Install Fonts – Installs the custom fonts on devices.
• Policy 2: Configuration Profile to Force Font Usage – Enforces that applications use the custom fonts by default and restricts font usage.

Let me know if you’d like more details on specific registry keys or any further assistance with Intune!