Forum Discussion
Dynamic groups based on device.enrollmentProfileName for WIndows 10 devices
Didn't really find an answer to this and getting a proper answer from support seemed hard because the functionality spans multiple teams. So here it goes. As I read in the dynamic group document...
I could, and I am for now.
But that doesn't quench my curiosity about this. 🙂
I've also seen scenario's where suddenly the Autopilot related attributes in devicePhysicalIDs seem to have disappeared. But that is a problem for another time. Haven't been able to replicate that one.
But that doesn't quench my curiosity about this. 🙂
I've also seen scenario's where suddenly the Autopilot related attributes in devicePhysicalIDs seem to have disappeared. But that is a problem for another time. Haven't been able to replicate that one.
Have you looked into GroupTags?
What they might mean for you?
I haven't seen easy issues with them disappearing.
https://techcommunity.microsoft.com/t5/intune-customer-success/support-tip-using-group-tags-to-import-devices-into-intune-with/ba-p/815336
What they might mean for you?
I haven't seen easy issues with them disappearing.
https://techcommunity.microsoft.com/t5/intune-customer-success/support-tip-using-group-tags-to-import-devices-into-intune-with/ba-p/815336
Yes, but the grouptags are pretty much the devicephysicalIDs.
U use them in dynamic groups just the same:
(device.devicePhysicalIds -any _ -eq "[OrderID]:Sales")
I know all that, but I want to know the answer to my question. Out of curiosity. You can solve my problem in many different ways. But my curiosity is only solved with knowledge. 😄
ShellBlazer I'm curious about this too. Were you ever able to find a solution for this?
- Check the profileenrollmentname value via the Graph API. It's a good option but it's not always clear to me which policy is applied to which device.
https://c7solutions.com/2020/09/what-is-the-value-of-enrollmentprofilename
enrollmentProfileName (Enrollment profile name): Create a filter rule based on the enrollment profile name. This property is applied to a device when the device enrolls. It's a string value created by you, and matches the Windows Autopilot, Apple Automated Device Enrollment (ADE), or Google enrollment profile applied to the device. To see your enrollment profile names, sign in to the Intune admin center, and go to Devices > Enroll devices.
Enter the full string value (using -eq, -ne, -in, -notIn operators), or partial value (using -startswith, -contains, -notcontains operators).
Examples:
(device.enrollmentProfileName -eq "DEP iPhones")
(device.enrollmentProfileName -startsWith "Autopilot Profile")
(device.enrollmentProfileName -ne $null)
This property applies to:
Android Enterprise
iOS/iPadOS
Windows 11
Windows 10
https://learn.microsoft.com/en-us/mem/intune/fundamentals/filters-device-properties
