Disabling Windows 11 MAC Randomization via Intune Wi-Fi Profiles

Jenifer Teffani 20 Reputation points
2026-07-06T14:50:48.8833333+00:00

Context: Our corporate access points rely on MAC address filtering to authorize hardware. Because Windows 11 randomizes MAC addresses by default, our authorized devices are currently losing connectivity.

Question: How do we configure an Intune Wi-Fi profile to globally disable "Random Hardware Addresses" on Windows 11?

Windows for business | Windows 365 Business
0 comments
Answer accepted by question author
Harry Phan 32,025 Reputation points Independent Advisor
2026-07-06T15:16:53.26+00:00

Hi Jenifer,

Unfortunately, Intune does not include a built-in setting in Windows Wi‑Fi profiles to globally disable Random Hardware Addresses on Windows 11.

To enforce the use of physical MAC addresses, you'll need to use a custom solution such as a PowerShell script, Proactive Remediation, or a custom Wi‑Fi XML profile deployed through Intune.

Also, Microsoft generally recommends using WPA2/WPA3-Enterprise (802.1X) instead of MAC address filtering, as MAC addresses can be easily spoofed and are not considered a strong security control.

In short, there is currently no native Intune setting to disable Random Hardware Addresses globally, so a custom policy or script-based approach is required.

Harry.

Was this answer helpful?

1 person found this answer helpful.
0 comments

0 additional answers

Sort by: Most helpful
Most helpful Newest Oldest

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.