windows-itpro-docs/windows/security/information-protection/personal-data-encryption/pde-in-intune/intune-disable-hibernation.md

title, description, author, ms.author, ms.reviewer, manager, ms.topic, ms.prod, ms.technology, ms.localizationpriority, ms.date

title	description	author	ms.author	ms.reviewer	manager	ms.topic	ms.prod	ms.technology	ms.localizationpriority	ms.date
Disable hibernation in Intune	Disable hibernation in Intune	frankroj	frankroj	rhonnegowda	aaroncz	how-to	windows-client	itpro-security	medium	03/10/2023

Disable hibernation in Intune

Hibernation files can potentially cause the keys used by PDE to protect content to be exposed. For greatest security, disable hibernation.

To disable hibernation using Intune:

1. Sign in to the Microsoft Intune admin center.

2. In the Home screen, select Devices.

3. In the Devices | Overview screen, under Policy, select Configuration Profiles.

4. In the Devices | Configuration profiles screen, select Create profile.

5. In the Create profile window:

   1. Under Platform, select Windows 10 and later.

   2. Under Profile type, select Settings catalog.

   3. Select Create.

6. In the Basics page of the Create profile screen:

   1. Next to Name, enter Disable Hibernation.

   2. Next to Description, enter a description.

   3. Select Next.

7. In the Configuration settings page:

   1. select Add settings.

   2. In the Settings picker window:

      1. Under Browse by category, scroll down and select Power.

      2. When the settings for the Power category appear under Setting name, select Allow Hibernate, and then select the X in the top right corner of the Settings picker window to close the window.

   3. Change Allow Hibernate from Allow to Block by selecting the slider next to the option.

   4. Select Next.

8. In the Scope tags page, configure if necessary and then select Next.

9. In the Assignments page:

   1. Under Included groups, select Add groups.

      Note

      Make sure to add the correct groups under Included groups and not under Excluded groups. Accidentally adding the desired device groups under Excluded groups will result in those devices being excluded and they won't receive the configuration profile.

   2. In the Select groups to include window that opens, select the groups that the configuration profile should be assigned to, and then select Select.

   3. Under Groups, ensure the correct group(s) are selected, and then select Next.

10. In Review + create page, review the configuration to make sure everything is configured correctly, and then select Create.