Forum Discussion
Separate APP policies
Hi Stuart,
if you exclude the filter it will exclude from the complete policy. Since you are planning for screen capture feature, create a duplicate policy and exclude the corporate device and add in the new policy. And you create filter device ownership = corporate.
Hi Buddy
Many thanks for your reply although I don't think I really understand what you are saying.
Anyway, I think I have it working with the following filters:
- BYOD APP policy > Assigned to E3 / F3 groups > EXCLUDE (app.deviceManagementType -eq "Android Enterprise")
- Corp Owned / Intune Enrolled COBO APP policy - EXCLUDE (app.deviceManagementType -eq "Unmanaged")
In APP Monitor, I can see:
- BYOD APP policy going to my test BYOD device
- COBO APP policy going to my test COBO device
This is the desired outcome 😎🌲
You’re on the right track, and your targeting approach (same user groups + split via filters) is exactly how most people keep APP manageable without multiplying groups.
If APP Monitor shows the BYOD policy landing on the BYOD test device and the COBO policy on the COBO test device, then your filter split is working as intended.
One small tip: keep an eye on users who have both a BYOD and a COBO device. Using the same user groups is fine, but make sure the filters remain mutually exclusive so you don’t accidentally apply both policies to the same sign-in context. 😊
