Autopilot and Device Setup - Apps

Hy,

take a look on dynamic groups and Filters:

https://learn.microsoft.com/en-us/autopilot/enrollment-autopilot

For Example in order to o create a group that includes all of the Windows Autopilot devices, enter: (device.devicePhysicalIDs -any (_ -startsWith "[ZTDid]")).

For you "Rules" you can use Filters, it suitable for your scope.

https://learn.microsoft.com/en-us/intune/intune-service/fundamentals/filters

Review you APP assignments and maybe later one you Firewall rules.

Be aware that you can not combine Filters (only Devices) on User Deployments Scopes or assignments.

Good luck!