Forum Discussion

MaxRebo's avatar
MaxRebo
Copper Contributor
Feb 13, 2026

Help creating Device groups

Hi,

I'm new to using Intune on a day to day basis, after adding our devices to Intune via our On-prem Active Directory.

 

What's the best practice for organizing our Devices, such as Staff devices and Student devices?

I want to create a group for all staff devices and another for student devices.

Also, is there any way to auto enroll these pcs in to the correct groups once they're new ones added via our on Prem AD and Entra?

Intune

1 Reply

  • mertefekanlikilic's avatar
    mertefekanlikilic
    MCT
    Feb 17, 2026

    Hi MaxRebo​ 

    Just to clarify an important point: dynamic device groups can’t use user attributes (like Department or Job Title). Device groups only work with device attributes such as deviceCategory, displayName, Group Tag, enrollmentProfileName, or extensionAttributes.

    You have two supported approaches:

    Dynamic device groups

    • Use device-based attributes (naming convention, Autopilot Group Tag, extensionAttribute) to separate Staff vs Student devices.

    Dynamic user groups

    • Use user attributes (Department, Job Title, etc.) and assign user-targeted policies to those groups instead of device groups.

    In practice, many environments use both:

    • Device groups for device-specific settings
    • User groups for user-driven policies

    This keeps things clean and fully automated when new devices are added.

    Hope this helps.