First published on TechNet on Oct 08, 2018 Hi everyone, Matt Butcher here. I’m a Support Escalation Engineer on the Intune team and today I wanted to take a minute to go through the steps to conf...
Updated Mar 04, 2019
Version 5.0
Blog Post
Thanks for the feedback Matthew. That's cleared it up for me.
One little follow up question :) ...
I've targeted all app/profile deployments to a dynamic AAD group based on the enrollment profile (as described in the docs)
That works great but now we are in the position that we need to exclude some devices to troubleshoot them. So, from what you've said above I should change the Managed Home Screen app to "not required" and we should then be able to get the device's Android Settings.
However, if I do that it will remove it for all devices so I need to allow exceptions in the dynamic group membership rules. I've tried doing this based on device id and name but the profile/apps still seem to be applying
Example of the dynamic rule I'm trying to exclude 2 different devices:
(device.enrollmentProfileName -eq "Contoso Kiosks 01") -and (device.deviceid -ne "j2dj2e2-51d3-4d5f-8ace-153a35718256" -or device.displayName -notcontains "3131k5afff157h23_AndroidEnterprise_11/1/1111_4:07 PM")