Fixing Wireless Screen Sharing on Intune-Enrolled Devices

Wireless screen sharing (Miracast/Project to this PC) may not work properly on devices enrolled in Microsoft Intune. This guide provides firewall rules and optional Group Policy configurations to resolve the issue.

Problem Description

Users are unable to use wireless screen sharing features on Intune-enrolled Windows devices. The "Connect" app or "Project to this PC" functionality fails to work, preventing users from projecting their screens wirelessly to other devices.

Solution: Intune Firewall Rules (Primary Fix)

The primary solution is to configure firewall rules in Intune to allow the necessary services for wireless screen sharing.

Create Firewall Policy

Navigate to Microsoft Intune admin center
Go to Endpoint Security > Firewall
Click Create Policy
Select platform: Windows 10 and later
Select profile: Microsoft Defender Firewall Rules
Click Create

Add Firewall Rules

You need to create 4 rules total: 2 outbound rules and 2 inbound rules for the required services.

Rule 1: CastSrv Outbound

Create a new rule with the following settings:

Name: Wireless Display - CastSrv (Out)
Direction: Out
Action: Allowed
Network types: Domain, Private, Public
File Path: %systemroot%\system32\castSrv.exe
Interface Types: Remote Access, Wireless, LAN

Rule 2: WUDFHost Outbound

Create another rule with these settings:

Name: Wireless Display - WUDFHost (Out)
Direction: Out
Action: Allowed
Network types: Domain, Private, Public
File Path: %systemroot%\system32\WUDFHost.exe
Interface Types: Remote Access, Wireless, LAN

Rule 3: CastSrv Inbound

Create a third rule (identical to Rule 1 but inbound):

Name: Wireless Display - CastSrv (In)
Direction: In
Action: Allowed
Network types: Domain, Private, Public
File Path: %systemroot%\system32\castSrv.exe
Interface Types: Remote Access, Wireless, LAN

Rule 4: WUDFHost Inbound

Create a fourth rule (identical to Rule 2 but inbound):

Name: Wireless Display - WUDFHost (In)
Direction: In
Action: Allowed
Network types: Domain, Private, Public
File Path: %systemroot%\system32\WUDFHost.exe
Interface Types: Remote Access, Wireless, LAN

Assign the Policy

Click Next through the configuration
On the Assignments tab, assign to your target device groups
Review and create the policy

Test First

Try the firewall rules first before implementing the Group Policy settings below. The firewall rules alone often resolve the issue.

Optional: Group Policy Configuration

If the firewall rules alone don't resolve the issue, you may need to configure additional WLAN AutoConfig settings via Group Policy.

When to Use This

Only implement these GPO settings if the Intune firewall rules alone don't solve the problem.

Configure Wireless Network Policy

Open Group Policy Management
Navigate to: Computer Configuration > Windows Settings > Security Settings > Wireless Network (802.11) Policies
Right-click and select Create a New Policy

Policy Settings

Configure the following options:

General Tab: - ✅ Check "Use Windows WLAN AutoConfig service for clients"

Permissions Tab: - ✅ Check "Allow User to view denied networks" - ✅ Check "Allow everyone to create all user profiles"

Link and Apply

Link the GPO to the appropriate Organizational Unit (OU)
Run gpupdate /force on test devices or wait for automatic policy refresh
Restart the devices to ensure settings are applied

Verification

After applying the firewall rules (and optionally the GPO settings):

Restart the device or wait for Intune policy sync
Open Settings > System > Projecting to this PC
Verify the settings are configurable and not grayed out
Test wireless projection:
From another device, press Win + K
Search for your device
Attempt to connect

Test Projection

Test from both directions: - Projecting FROM the Intune device to another display - Projecting TO the Intune device from another device

What These Rules Do

castSrv.exe

The Cast Server service handles wireless display (Miracast) connections. This executable manages the receiving end when your device acts as a wireless display target.

WUDFHost.exe

Windows User-Mode Driver Framework Host process supports various hardware devices, including wireless display adapters. This is required for the wireless display stack to function properly.

Interface Types

Remote Access: VPN connections
Wireless: Wi-Fi adapters
LAN: Ethernet connections

Including all interface types ensures wireless display works regardless of network connection type.

Troubleshooting

Wireless Display Still Not Working

Problem: After applying firewall rules, wireless display still doesn't work.

Solutions: - Verify the Intune policy has synced to the device (check in Company Portal or Settings > Accounts > Access work or school) - Restart the device to ensure firewall rules are active - Check Windows Defender Firewall logs for blocked connections - Implement the optional Group Policy settings - Ensure both devices support Miracast (check with netsh wlan show drivers)

Policy Not Syncing

Problem: Firewall policy doesn't appear on the device.

Solutions: - Force a sync from Company Portal app - Check device is properly enrolled and compliant - Verify the device is in the assigned group - Wait up to 8 hours for automatic sync (or force sync) - Check Intune portal for policy deployment status

Miracast Not Supported

Problem: Device reports Miracast is not supported.

Check Support:

netsh wlan show drivers

Look for the line: Wireless Display Supported: Yes

Solutions: - Update Wi-Fi adapter drivers - Some adapters don't support Miracast (hardware limitation) - Consider using wired display connections or USB display adapters instead - Check manufacturer specifications for Miracast support

"Projecting to this PC" Settings Grayed Out

Problem: Settings are visible but can't be changed.

Solutions: - Check if Group Policy is blocking the settings - Verify the device supports the required features - Ensure the device is on Windows 10 Pro/Enterprise or Windows 11 Pro/Enterprise - Check that the "Wireless Display" optional feature is installed

Connection Drops Frequently

Problem: Wireless display connects but frequently disconnects.

Solutions: - Check Wi-Fi signal strength (5GHz is recommended) - Reduce distance between devices - Minimize Wi-Fi interference (other networks, Bluetooth devices) - Update Wi-Fi drivers on both devices - Disable Wi-Fi power saving mode

Best Practices

Network Considerations

Use 5GHz Wi-Fi: Better performance and less interference than 2.4GHz
Direct Wi-Fi connection: Miracast often uses Wi-Fi Direct, not your regular network
Bandwidth: Ensure adequate Wi-Fi bandwidth for screen streaming

Security

Network Types: The rules allow all network types (Domain, Private, Public) for flexibility
Consider limiting: In high-security environments, you might want to restrict to Domain/Private only
User awareness: Educate users about wireless display security implications

Deployment

Test thoroughly: Test on various device models before wide deployment
Pilot group: Deploy to a small pilot group first
Monitor: Check for any issues or conflicts with existing policies
Document: Keep records of which devices and users need this functionality

Alternative Solutions

If wireless display still doesn't work after these fixes:

Wired Connections

HDMI/DisplayPort: Traditional wired connections
USB-C to HDMI: For devices with USB-C ports
Docking stations: Provide reliable display connectivity

Third-Party Solutions

Miracast adapters: Hardware dongles that plug into HDMI
Microsoft Wireless Display Adapter: Official Microsoft hardware
Chromecast: Google's wireless display solution

Remote Desktop Solutions

Remote Desktop Protocol (RDP): Built into Windows
Teams Screen Sharing: If collaboration is the goal
Third-party remote tools: TeamViewer, AnyDesk, etc.

This guide applies to Windows 10 and Windows 11 devices enrolled in Microsoft Intune.