Forum Discussion
Laptop getting apps installed from intune even though the computer group is excluded
thanks for the reply. no, we only use device groups
We had the same issue and there were two issues:
1) We had a user group assigned without realizing it.
2) We had two device groups: A default device group that new devices were put into by default (used as the "Include" group) and then a dynamic group that added devices based on serial number (used as the "exclude" group). For whatever reason, the order of operations in Intune was such that the flow allowed the PCs to receive the apps. It looked like what happened was:
PC was added to Intune via autopilot.
PC was immediately added to include group.
App showed as "Include" for PC.
App was pushed to PC.
While app was pushing to PC, PC was added to exclude group by dynamic filter.
App now showed "Exclude" for that PC.
App finished installing on PC.
We had to use a second dynamic group for our include group to solve this. Not sure if that's what's happening to you, but you might try testing it by change the assigned groups.