Forum Discussion
Is there a way in Intune to troubleshoot apps or profiles installation on a single device?
Hi there I would like to know if there is a way like in airwatch to installor remove an app or a profile to a single device ?
Alls apps and profiles are assigned to a dynamic group or AAD group because we enroll android enterprise dedicated devices or COPE or FullyManaged devices .
If I want to force the re-installation or remove and install again a profile or an app on a single device how can I do ?
Now I'm able to unassign the targeted group and re-assign the group to help a profile or an app to get install, but I need to do it on a single device only instead of the full group otherwise every devices are impacted.
It's very hard to troubleshoot a single device for me.
Could you please help me finding an solution like we have on airwatch?
Kind regards
2 Replies
With Configuration Profiles it is still simple:
You can create your own group that you add as excluded to a Configuration Profile. Even if a member in this group is also in the Included group, the assignment will be removed.
Apps
Reinstallation of apps is not so easy if you work with dynamic groups and do not want to remove this assignment from the group. My recommendation is to work with normal groups and fill them via automation. Then you are much more flexible with the assignments of apps and configuration profiles. You can easily add and remove individual computers/users
But a possible solution for apps is that you add a unistall group to required and avialable installation and if you click on Group Mode you can turn Include into Exclude. Then you add the same group to the unistallation as included. Then you add the devices to this group.
When the uninstallation is done you can remove the device from this group again and the app will be install again. It is not really nice but it works.
A other possible workaround would be the following, but I can't recommend it:
You can flag the device somehow, e.g. via the device category, a prefix in the name, .... and build a filter from it that contains the flag. This filter you can add at the app installation as excluded filter and at the uninstallation as include filter. When the uninstallation is done you can remove the flag again and the app will be reinstalled.
- With Configuration Profiles it is still simple:
You can create your own group that you add as excluded to a Configuration Profile. Even if a member in this group is also in the Included group, the assignment will be removed.
OK many thanks @Jannik we will try creating an exclusion group for user's device enrolled in COPE. I'll let you know.
Most of our enrolled devices are dedicated devices without user affinity (no name). We must use dynamical group for these kind of devices. I'll try also to create an exclusion AAD group for these devices too.
Hope MS will add soon a better way instead of using exclusion groups or filters (too complex to manage at day to day compare to other mdm)
I'll let you know again many thanks for your clear answer
