March 27, 2024

Update: Add {0000111F-0000-1000-8000-00805F9B34FB} for certain Polycom Bluetooth devices.

After figuring out how to Disable Bluetooth File Transfer with ConfigMgr, I figured it would be worth while to do this for all of the Intune admins out there. This is easy since all the hard work was already done (figuring out what services to allow).

Sign on to the Intune portal and head over to Devices > Configuration profiles and select + Create profile.

Under Platform, select Windows 10 and later and for Profile type, select Settings catalog, then click Create.

1. Give it a Name, like Disable Bluetooth File Transfer, click Next.
2. On the Configuration settings step, click + Add settings.
3. In the Settings picker, select Bluetooth.
4. Under the 7 settings in “Bluetooth” category, select Services Allowed List, then close the Settings picker.
5. Back on the Configuration settings step, copy and paste the following into the field and then click Next:
   {0000111E-0000-1000-8000-00805F9B34FB};{00001203-0000-1000-8000-00805F9B34FB};{00001108-0000-1000-8000-00805F9B34FB};{00001200-0000-1000-8000-00805F9B34FB};{0000110B-0000-1000-8000-00805F9B34FB};{0000110C-0000-1000-8000-00805F9B34FB};{0000110E-0000-1000-8000-00805F9B34FB};{0000110F-0000-1000-8000-00805F9B34FB};{00001124-0000-1000-8000-00805F9B34FB};{00001801-0000-1000-8000-00805F9B34FB};{00001812-0000-1000-8000-00805F9B34FB};{00001800-0000-1000-8000-00805F9B34FB};{0000180A-0000-1000-8000-00805F9B34FB};{00001813-0000-1000-8000-00805F9B34FB}
   This will automatically expand and look like the following:
   
6. On the Scope tags step, add any necessary Scope tags, then click Next.
   
7. On the Assignments step, select a group that contains a test machine, then click Next.
   
8. On the Review + create step, review all the settings and then click Create.

An easy way to test this is to pair two Windows systems. On Windows, open up the Bluetooth & other devices menu in Settings and click on Add Bluetooth or other device.

On the Add a device window, select Bluetooth – Mice, keyboards, pens, or audio and other kinds of Bluetooth devices.

Find the device you want to pair. In my case, I am using my Surface Book.

Once the connection is successful, back in the Bluetooth & other devices menu, click on the Send or receive files via Bluetooth link.

Test a file transfer to see if it is working correctly by clicking Send files.

Select the device you would like to send the file to.

Choose a file.

And the result should be a successful file transfer.

Add the device to the targeted group and sync the policy. Repeat the test above and this time it should say that the transfer was not completed and that the file transfer is disabled by policy.

Be sure to test this in your environment with the various Bluetooth devices that are used to ensure there are no issues. In the testing that I have done, everything has continued to work, and I am able to pair/use Bluetooth devices. If you do run into any issues, please leave a comment below. Also, open up a support case with the vendor as they might have their own GUID that can be added.

Originally posted on https://miketerrill.net/